0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x149800) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/55, 0x37}], 0x1) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x2, 0x7fffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:16:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500fe", 0x2d}], 0x1}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9f49aec3"}, 0x0, 0x0, @planes=&(0x7f00000001c0)={0x0, 0x9, @fd}}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) [ 2947.283219][ T9894] usb 4-1: USB disconnect, device number 115 [ 2947.418382][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2947.611156][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2947.759398][ T9894] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2948.009688][ T9894] usb 4-1: Using ep0 maxpacket: 8 [ 2948.152832][ T9894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2948.163219][ T9894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2948.174839][ T9894] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2948.181780][ T9894] usb 4-1: New USB device found, idVendor=8025, idProduct=001b, bcdDevice= 0.00 [ 2948.191116][ T9894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:16:52 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x1ff}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 09:16:52 executing program 4: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x149800) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/55, 0x37}], 0x1) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x2, 0x7fffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:16:52 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000200000825801b0000000000000109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000300905810308000000000904011c00020d000009040101"], 0x0) 09:16:52 executing program 1: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x149800) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/55, 0x37}], 0x1) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x2, 0x7fffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:16:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f00000000c0)="240000001a005f4714f9f407000904018000000000000000000000000800040040000008", 0x24) [ 2948.429608][ T9894] usb 4-1: can't set config #1, error -71 [ 2948.509648][ T9894] usb 4-1: USB disconnect, device number 116 [ 2948.652911][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2948.731748][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:16:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f00000000c0)="240000001a005f4714f9f407000904018000000000000000000000000800040040000008", 0x24) 09:16:53 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x1ff}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 09:16:53 executing program 4: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x149800) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/55, 0x37}], 0x1) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x2, 0x7fffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2949.160029][ T8693] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2949.409373][ T8693] usb 4-1: Using ep0 maxpacket: 8 [ 2949.561631][ T8693] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.572195][ T8693] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2949.583393][ T8693] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2949.590378][ T8693] usb 4-1: New USB device found, idVendor=8025, idProduct=001b, bcdDevice= 0.00 [ 2949.599713][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.691388][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:16:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 09:16:54 executing program 1: perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x149800) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/55, 0x37}], 0x1) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x2, 0x7fffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:16:54 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f00000000c0)="240000001a005f4714f9f407000904018000000000000000000000000800040040000008", 0x24) 09:16:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 2950.129632][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2950.135696][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2950.141920][ T8693] cdc_ncm 4-1:1.0: bind() failure [ 2950.266887][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2950.273068][ T8693] cdc_ncm: probe of 4-1:1.1 failed with error -22 [ 2950.280303][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2950.286252][ T8693] cdc_mbim: probe of 4-1:1.1 failed with error -22 [ 2950.295779][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2950.301883][ T8693] usbtest: probe of 4-1:1.1 failed with error -22 09:16:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1770, 0xff00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x8c, 0x86, 0x0, 0xc45, 0x6270, 0xe81b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9a, 0x8c, 0xa7}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "093acb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:16:54 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f00000000c0)="240000001a005f4714f9f407000904018000000000000000000000000800040040000008", 0x24) [ 2950.570216][ T8693] usb 4-1: USB disconnect, device number 117 [ 2950.617497][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.737741][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.849313][T30066] usb 5-1: new high-speed USB device number 15 using dummy_hcd 09:16:55 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000200000825801b0000000000000109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000300905810308000000000904011c00020d000009040101"], 0x0) 09:16:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 09:16:55 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/uinput\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) 09:16:55 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 2951.211059][T30066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2951.222206][T30066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2951.232305][T30066] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2951.241661][T30066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:16:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 09:16:56 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/uinput\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) [ 2951.597082][T30066] usb 5-1: config 0 descriptor?? [ 2951.708974][ T8693] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2951.774575][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2951.944979][T30066] usbhid 5-1:0.0: can't add hid device: -71 [ 2951.951746][T30066] usbhid: probe of 5-1:0.0 failed with error -71 [ 2951.970634][ T8693] usb 4-1: Using ep0 maxpacket: 8 [ 2951.996554][T30066] usb 5-1: USB disconnect, device number 15 [ 2952.100592][ T8693] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2952.111828][ T8693] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2952.123019][ T8693] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2952.129874][ T8693] usb 4-1: New USB device found, idVendor=8025, idProduct=001b, bcdDevice= 0.00 [ 2952.139119][ T8693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:16:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 09:16:56 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 09:16:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 09:16:56 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/uinput\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) [ 2952.441932][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2952.447932][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2952.454330][ T8693] cdc_ncm 4-1:1.0: bind() failure [ 2952.459266][T30066] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2952.468143][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2952.474220][ T8693] cdc_ncm: probe of 4-1:1.1 failed with error -22 [ 2952.482095][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2952.488044][ T8693] cdc_mbim: probe of 4-1:1.1 failed with error -22 [ 2952.497761][ T8693] usb 4-1: selecting invalid altsetting 0 [ 2952.503817][ T8693] usbtest: probe of 4-1:1.1 failed with error -22 [ 2952.811005][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2952.829417][T30066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2952.840798][T30066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2952.851036][T30066] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2952.860451][T30066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2953.093144][ T8693] usb 4-1: USB disconnect, device number 118 [ 2953.119301][T30066] usb 5-1: config 0 descriptor?? [ 2953.603499][T30066] gt683r_led 0003:1770:FF00.005F: item fetching failed at offset 4/5 [ 2953.612650][T30066] gt683r_led 0003:1770:FF00.005F: hid parsing failed [ 2953.619932][T30066] gt683r_led: probe of 0003:1770:FF00.005F failed with error -22 [ 2953.689850][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2953.805011][ T8693] usb 5-1: USB disconnect, device number 16 [ 2953.852529][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2954.589352][ T9894] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2954.895005][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2954.980519][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2954.991968][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2955.002135][ T9894] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2955.011456][ T9894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2955.094470][ T9894] usb 5-1: config 0 descriptor?? 09:16:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1770, 0xff00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x8c, 0x86, 0x0, 0xc45, 0x6270, 0xe81b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9a, 0x8c, 0xa7}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "093acb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:16:59 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 09:16:59 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/uinput\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) 09:16:59 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffde, 0x0) 09:16:59 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000200000825801b0000000000000109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000300905810308000000000904011c00020d000009040101"], 0x0) 09:16:59 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2a002, 0x0) write$proc_mixer(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='IGAIN\nMIC \'Line\'\t\x00\x00\x0000000000000000000\nMIC \'Capture Switch\' 00000000000000000000\nMIC \'Mic Capture Switch'], 0x7e) dup3(r0, r1, 0x0) [ 2955.294313][ T9894] usb 5-1: can't set config #0, error -71 [ 2955.322313][ T9894] usb 5-1: USB disconnect, device number 17 [ 2955.661801][ T9024] usb 4-1: new high-speed USB device number 119 using dummy_hcd 09:17:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x800000003, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4101, 0x1005}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') socket(0x11, 0x2, 0x0) preadv(r2, &(0x7f00000017c0), 0x1c7, 0xba, 0x0) 09:17:00 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 09:17:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x2070e000) [ 2955.922344][T16699] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2955.931600][T30065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2955.947073][ T9024] usb 4-1: Using ep0 maxpacket: 8 [ 2956.071025][ T9024] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2956.081424][ T9024] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2956.093748][ T9024] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2956.100633][ T9024] usb 4-1: New USB device found, idVendor=8025, idProduct=001b, bcdDevice= 0.00 [ 2956.109910][ T9024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2956.300311][T16699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2956.311556][T16699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2956.321793][T16699] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2956.331095][T16699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:17:00 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r5, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0x0) 09:17:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x800000003, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4101, 0x1005}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') socket(0x11, 0x2, 0x0) preadv(r2, &(0x7f00000017c0), 0x1c7, 0xba, 0x0) 09:17:01 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffde, 0x0) [ 2956.588361][T16699] usb 5-1: config 0 descriptor?? [ 2956.719002][ T9024] usb 4-1: selecting invalid altsetting 0 [ 2956.725081][ T9024] usb 4-1: selecting invalid altsetting 0 [ 2956.731314][ T9024] cdc_ncm 4-1:1.0: bind() failure [ 2956.740491][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2956.745072][ T9024] usb 4-1: selecting invalid altsetting 0 [ 2956.754650][ T9024] cdc_ncm: probe of 4-1:1.1 failed with error -22 [ 2956.761780][ T9024] usb 4-1: selecting invalid altsetting 0 [ 2956.767723][ T9024] cdc_mbim: probe of 4-1:1.1 failed with error -22 [ 2956.777292][ T9024] usb 4-1: selecting invalid altsetting 0 [ 2956.783406][ T9024] usbtest: probe of 4-1:1.1 failed with error -22 [ 2956.930603][T16699] usbhid 5-1:0.0: can't add hid device: -71 [ 2956.937000][T16699] usbhid: probe of 5-1:0.0 failed with error -71 [ 2956.989162][T16699] usb 5-1: USB disconnect, device number 18 [ 2957.236789][T30065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2957.251326][ T9024] usb 4-1: USB disconnect, device number 119 [ 2957.499379][T16699] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2958.049061][T16699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2958.060276][T16699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2958.070348][T16699] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2958.079652][T16699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2958.208100][T16699] usb 5-1: config 0 descriptor?? [ 2958.250640][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2958.360194][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2958.712709][T16699] gt683r_led 0003:1770:FF00.0060: item fetching failed at offset 4/5 [ 2958.721687][T16699] gt683r_led 0003:1770:FF00.0060: hid parsing failed [ 2958.729201][T16699] gt683r_led: probe of 0003:1770:FF00.0060 failed with error -22 [ 2958.929365][ T8693] usb 5-1: USB disconnect, device number 19 [ 2959.291185][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1770, 0xff00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x8c, 0x86, 0x0, 0xc45, 0x6270, 0xe81b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9a, 0x8c, 0xa7}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "093acb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:17:04 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r5, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0x0) 09:17:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x800000003, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4101, 0x1005}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') socket(0x11, 0x2, 0x0) preadv(r2, &(0x7f00000017c0), 0x1c7, 0xba, 0x0) 09:17:04 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffde, 0x0) 09:17:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 09:17:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0xc53b) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/59, 0x3b}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @perf_config_ext={0x2002, 0x80}, 0x109, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 2959.769005][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 09:17:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x800000003, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4101, 0x1005}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') socket(0x11, 0x2, 0x0) preadv(r2, &(0x7f00000017c0), 0x1c7, 0xba, 0x0) [ 2960.187824][ C0] sd 0:0:1:0: [sg0] tag#6192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2960.198534][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB: Test Unit Ready [ 2960.205306][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.215250][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.225084][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.235035][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.244872][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.254710][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.264551][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.274404][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.284237][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.294072][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.303900][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.313789][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2960.323615][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[c0]: 00 00 00 00 00 00 00 00 09:17:05 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r5, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0x0) [ 2960.685267][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:05 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffde, 0x0) 09:17:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 09:17:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) [ 2961.252400][ T9894] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2961.670141][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2961.681564][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2961.691782][ T9894] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2961.701078][ T9894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.759575][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2961.776331][ T9894] usb 5-1: config 0 descriptor?? [ 2962.129102][ T9894] usbhid 5-1:0.0: can't add hid device: -71 [ 2962.135449][ T9894] usbhid: probe of 5-1:0.0 failed with error -71 [ 2962.263631][ T9894] usb 5-1: USB disconnect, device number 20 [ 2962.718273][ T9894] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2962.813279][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2962.835510][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2963.132031][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2963.143433][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2963.153518][ T9894] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2963.162818][ T9894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2963.360169][ T9894] usb 5-1: config 0 descriptor?? 09:17:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1770, 0xff00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x8c, 0x86, 0x0, 0xc45, 0x6270, 0xe81b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9a, 0x8c, 0xa7}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "093acb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 09:17:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:17:07 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0xc53b) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/59, 0x3b}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @perf_config_ext={0x2002, 0x80}, 0x109, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 2963.421038][ T9894] usb 5-1: can't set config #0, error -71 [ 2963.437616][ T9894] usb 5-1: USB disconnect, device number 21 09:17:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0xc53b) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/59, 0x3b}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @perf_config_ext={0x2002, 0x80}, 0x109, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 09:17:07 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r5, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0x0) 09:17:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="f0000000100001"], 0xf0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x1c435b2b, 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/225, 0xe1}, 0x0) [ 2963.859592][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2963.895039][ C0] sd 0:0:1:0: [sg0] tag#6193 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2963.905693][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB: Test Unit Ready [ 2963.912487][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2963.922348][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2963.932180][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2963.942066][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2963.951915][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2963.961761][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2963.971611][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2963.981451][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2963.991293][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2964.001124][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2964.010960][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2964.020800][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2964.030636][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[c0]: 00 00 00 00 00 00 00 00 09:17:08 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x300f, 0x9}}) 09:17:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="f0000000100001"], 0xf0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x1c435b2b, 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/225, 0xe1}, 0x0) [ 2964.452238][ C1] not chained 280000 origins [ 2964.456970][ C1] CPU: 1 PID: 5266 Comm: kworker/u4:29 Not tainted 5.8.0-rc5-syzkaller #0 [ 2964.465467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2964.475535][ C1] Workqueue: krdsd rds_connect_worker [ 2964.480903][ C1] Call Trace: [ 2964.484192][ C1] [ 2964.487062][ C1] dump_stack+0x21c/0x280 [ 2964.491525][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 2964.497276][ C1] ? ip_route_output_key_hash_rcu+0x1eb4/0x2000 [ 2964.503529][ C1] ? xfrm_lookup_route+0x2db/0x390 [ 2964.508643][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.513834][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2964.519635][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 2964.525779][ C1] ? tcp_select_initial_window+0x949/0xa00 [ 2964.531586][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.536774][ C1] __msan_chain_origin+0x50/0x90 [ 2964.541709][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 2964.546999][ C1] tcp_conn_request+0x3046/0x4c30 [ 2964.552050][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.557245][ C1] tcp_v4_conn_request+0x201/0x290 [ 2964.562367][ C1] tcp_v6_conn_request+0xeb/0x330 [ 2964.567403][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 2964.572697][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2964.578082][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2964.583899][ C1] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 2964.589958][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.595181][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2964.600990][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.606191][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2964.610786][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2964.615284][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.620496][ C1] ? tcp_filter+0xf0/0xf0 [ 2964.624821][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2964.630285][ C1] ip_local_deliver+0x727/0x8d0 [ 2964.635137][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 2964.640156][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 2964.645782][ C1] ip_rcv+0x795/0x810 [ 2964.649766][ C1] ? ip_rcv_core+0x1490/0x1490 [ 2964.654530][ C1] __netif_receive_skb+0x265/0x670 [ 2964.659636][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 2964.665175][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 2964.670823][ C1] process_backlog+0x50d/0xba0 [ 2964.675586][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2964.681450][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 2964.686727][ C1] napi_poll+0x43b/0xfd0 [ 2964.690969][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.696168][ C1] net_rx_action+0x35c/0xd40 [ 2964.700761][ C1] ? net_tx_action+0xdc0/0xdc0 [ 2964.705517][ C1] __do_softirq+0x2ea/0x7f5 [ 2964.710022][ C1] asm_call_on_stack+0xf/0x20 [ 2964.714689][ C1] [ 2964.717622][ C1] do_softirq_own_stack+0x7c/0xa0 [ 2964.722648][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 2964.727842][ C1] local_bh_enable+0x36/0x40 [ 2964.732424][ C1] ip_finish_output2+0x2459/0x2930 [ 2964.737529][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 2964.743361][ C1] ? nf_ct_deliver_cached_events+0x52f/0x7e0 [ 2964.749342][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.754569][ C1] __ip_finish_output+0xeb5/0xfd0 [ 2964.759598][ C1] ip_finish_output+0x14b/0x4b0 [ 2964.764451][ C1] ip_output+0x5f2/0x6e0 [ 2964.768698][ C1] ? ip_mc_finish_output+0x780/0x780 [ 2964.774061][ C1] ? ip_finish_output+0x4b0/0x4b0 [ 2964.779078][ C1] __ip_queue_xmit+0x1eac/0x23c0 [ 2964.784010][ C1] ? idle_cpu+0x9a/0x1d0 [ 2964.788251][ C1] ? __msan_get_context_state+0x9/0x20 [ 2964.793715][ C1] ip_queue_xmit+0xcc/0xf0 [ 2964.798140][ C1] ? tcp_v4_fill_cb+0x5e0/0x5e0 [ 2964.802985][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 2964.808177][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 2964.813746][ C1] tcp_connect+0x153f/0x3bb0 [ 2964.818343][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 2964.823626][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2964.829449][ C1] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 2964.835424][ C1] ? prandom_u32+0x1c1/0x280 [ 2964.840012][ C1] tcp_v4_connect+0x2532/0x26c0 [ 2964.844877][ C1] ? tcp_twsk_unique+0xe20/0xe20 [ 2964.849807][ C1] __inet_stream_connect+0x14fe/0x16f0 [ 2964.855272][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.860479][ C1] inet_stream_connect+0x101/0x180 [ 2964.865591][ C1] ? __inet_stream_connect+0x16f0/0x16f0 [ 2964.871217][ C1] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 2964.876849][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.882044][ C1] ? rds_tcp_state_change+0x400/0x400 [ 2964.887404][ C1] rds_connect_worker+0x36b/0x550 [ 2964.892423][ C1] ? rds_addr_cmp+0x290/0x290 [ 2964.897096][ C1] process_one_work+0x1688/0x2140 [ 2964.902135][ C1] worker_thread+0x10bc/0x2730 [ 2964.906893][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2964.912097][ C1] kthread+0x551/0x590 [ 2964.916161][ C1] ? process_one_work+0x2140/0x2140 [ 2964.921371][ C1] ? kthread_blkcg+0x110/0x110 [ 2964.926131][ C1] ret_from_fork+0x1f/0x30 [ 2964.930671][ C1] Uninit was stored to memory at: [ 2964.935685][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2964.941393][ C1] __msan_chain_origin+0x50/0x90 [ 2964.946319][ C1] tcp_conn_request+0x19d6/0x4c30 [ 2964.951332][ C1] tcp_v4_conn_request+0x201/0x290 [ 2964.956435][ C1] tcp_v6_conn_request+0xeb/0x330 [ 2964.961447][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2964.966809][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2964.971404][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2964.975895][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2964.981340][ C1] ip_local_deliver+0x727/0x8d0 [ 2964.986176][ C1] ip_rcv+0x795/0x810 [ 2964.990149][ C1] __netif_receive_skb+0x265/0x670 [ 2964.995250][ C1] process_backlog+0x50d/0xba0 [ 2965.000018][ C1] napi_poll+0x43b/0xfd0 [ 2965.004252][ C1] net_rx_action+0x35c/0xd40 [ 2965.008833][ C1] __do_softirq+0x2ea/0x7f5 [ 2965.013322][ C1] [ 2965.015643][ C1] Uninit was stored to memory at: [ 2965.020673][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2965.026389][ C1] __msan_chain_origin+0x50/0x90 [ 2965.031322][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 2965.036599][ C1] tcp_conn_request+0x3046/0x4c30 [ 2965.041616][ C1] tcp_v4_conn_request+0x201/0x290 [ 2965.046719][ C1] tcp_v6_conn_request+0xeb/0x330 [ 2965.051734][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2965.057113][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2965.061693][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2965.066189][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2965.071640][ C1] ip_local_deliver+0x727/0x8d0 [ 2965.076477][ C1] ip_rcv+0x795/0x810 [ 2965.080454][ C1] __netif_receive_skb+0x265/0x670 [ 2965.085554][ C1] process_backlog+0x50d/0xba0 [ 2965.090325][ C1] napi_poll+0x43b/0xfd0 [ 2965.094557][ C1] net_rx_action+0x35c/0xd40 [ 2965.099137][ C1] __do_softirq+0x2ea/0x7f5 [ 2965.103619][ C1] [ 2965.105931][ C1] Uninit was stored to memory at: [ 2965.110947][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2965.116653][ C1] __msan_chain_origin+0x50/0x90 [ 2965.121580][ C1] tcp_conn_request+0x19d6/0x4c30 [ 2965.126594][ C1] tcp_v4_conn_request+0x201/0x290 [ 2965.131695][ C1] tcp_v6_conn_request+0xeb/0x330 [ 2965.136707][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2965.142068][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2965.146648][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2965.151140][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2965.156584][ C1] ip_local_deliver+0x727/0x8d0 [ 2965.161422][ C1] ip_rcv+0x795/0x810 [ 2965.165408][ C1] __netif_receive_skb+0x265/0x670 [ 2965.170513][ C1] process_backlog+0x50d/0xba0 [ 2965.175265][ C1] napi_poll+0x43b/0xfd0 [ 2965.179499][ C1] net_rx_action+0x35c/0xd40 [ 2965.184079][ C1] __do_softirq+0x2ea/0x7f5 [ 2965.188559][ C1] [ 2965.190872][ C1] Uninit was stored to memory at: [ 2965.195887][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2965.201612][ C1] __msan_chain_origin+0x50/0x90 [ 2965.206540][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 2965.211815][ C1] tcp_conn_request+0x3046/0x4c30 [ 2965.216828][ C1] tcp_v4_conn_request+0x201/0x290 [ 2965.221928][ C1] tcp_v6_conn_request+0xeb/0x330 [ 2965.226940][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2965.232300][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2965.236878][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2965.241370][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2965.246833][ C1] ip_local_deliver+0x727/0x8d0 [ 2965.251692][ C1] ip_rcv+0x795/0x810 [ 2965.255666][ C1] __netif_receive_skb+0x265/0x670 [ 2965.260768][ C1] process_backlog+0x50d/0xba0 [ 2965.265522][ C1] napi_poll+0x43b/0xfd0 [ 2965.269754][ C1] net_rx_action+0x35c/0xd40 [ 2965.274333][ C1] __do_softirq+0x2ea/0x7f5 [ 2965.278815][ C1] [ 2965.281129][ C1] Uninit was stored to memory at: [ 2965.286142][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2965.291865][ C1] __msan_chain_origin+0x50/0x90 [ 2965.296806][ C1] tcp_conn_request+0x19d6/0x4c30 [ 2965.301820][ C1] tcp_v4_conn_request+0x201/0x290 [ 2965.306918][ C1] tcp_v6_conn_request+0xeb/0x330 [ 2965.311931][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2965.317288][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2965.321867][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2965.326360][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2965.331806][ C1] ip_local_deliver+0x727/0x8d0 [ 2965.336642][ C1] ip_rcv+0x795/0x810 [ 2965.340617][ C1] __netif_receive_skb+0x265/0x670 [ 2965.345718][ C1] process_backlog+0x50d/0xba0 [ 2965.350470][ C1] napi_poll+0x43b/0xfd0 [ 2965.354705][ C1] net_rx_action+0x35c/0xd40 [ 2965.359282][ C1] __do_softirq+0x2ea/0x7f5 [ 2965.363767][ C1] [ 2965.366079][ C1] Uninit was stored to memory at: [ 2965.371108][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2965.376815][ C1] __msan_chain_origin+0x50/0x90 [ 2965.381744][ C1] tcp_openreq_init_rwin+0xf3e/0xf70 [ 2965.387015][ C1] tcp_conn_request+0x3046/0x4c30 [ 2965.392028][ C1] tcp_v4_conn_request+0x201/0x290 [ 2965.397141][ C1] tcp_v6_conn_request+0xeb/0x330 [ 2965.402154][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2965.407601][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2965.412180][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2965.416672][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2965.422116][ C1] ip_local_deliver+0x727/0x8d0 [ 2965.426952][ C1] ip_rcv+0x795/0x810 [ 2965.430926][ C1] __netif_receive_skb+0x265/0x670 [ 2965.436041][ C1] process_backlog+0x50d/0xba0 [ 2965.440801][ C1] napi_poll+0x43b/0xfd0 [ 2965.445038][ C1] net_rx_action+0x35c/0xd40 [ 2965.449624][ C1] __do_softirq+0x2ea/0x7f5 [ 2965.454124][ C1] [ 2965.456445][ C1] Uninit was stored to memory at: [ 2965.461473][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2965.467183][ C1] __msan_chain_origin+0x50/0x90 [ 2965.472111][ C1] tcp_conn_request+0x19d6/0x4c30 [ 2965.477127][ C1] tcp_v4_conn_request+0x201/0x290 [ 2965.482229][ C1] tcp_v6_conn_request+0xeb/0x330 [ 2965.487247][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2965.492624][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2965.497213][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2965.501708][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2965.507178][ C1] ip_local_deliver+0x727/0x8d0 [ 2965.512039][ C1] ip_rcv+0x795/0x810 [ 2965.516014][ C1] __netif_receive_skb+0x265/0x670 [ 2965.521119][ C1] process_backlog+0x50d/0xba0 [ 2965.525874][ C1] napi_poll+0x43b/0xfd0 [ 2965.530111][ C1] net_rx_action+0x35c/0xd40 [ 2965.534693][ C1] __do_softirq+0x2ea/0x7f5 [ 2965.539175][ C1] [ 2965.541492][ C1] Uninit was created at: [ 2965.545726][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 2965.551367][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 2965.556139][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 2965.561594][ C1] alloc_pages_current+0x685/0xb50 [ 2965.566706][ C1] alloc_slab_page+0x11c/0x1240 [ 2965.571546][ C1] new_slab+0x2bf/0x10c0 [ 2965.575780][ C1] ___slab_alloc+0xcd3/0x18a0 [ 2965.580482][ C1] kmem_cache_alloc+0xb70/0xc50 [ 2965.585323][ C1] inet_reqsk_alloc+0xaf/0x910 [ 2965.590077][ C1] tcp_conn_request+0x8dc/0x4c30 [ 2965.595008][ C1] tcp_v4_conn_request+0x201/0x290 [ 2965.600111][ C1] tcp_rcv_state_process+0x2de/0x45b0 [ 2965.605476][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2965.610060][ C1] tcp_v4_rcv+0x4ad1/0x5c10 [ 2965.614565][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2965.620017][ C1] ip_local_deliver+0x727/0x8d0 [ 2965.624860][ C1] ip_sublist_rcv+0x1389/0x1540 [ 2965.629699][ C1] ip_list_rcv+0x904/0x970 [ 2965.634112][ C1] __netif_receive_skb_list_core+0xeab/0x12b0 [ 2965.640170][ C1] __netif_receive_skb_list+0x818/0x990 [ 2965.645709][ C1] netif_receive_skb_list_internal+0xdfa/0xe20 [ 2965.651855][ C1] napi_complete_done+0x552/0xf90 [ 2965.656886][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 2965.662250][ C1] virtnet_poll+0x170f/0x1d10 [ 2965.666917][ C1] napi_poll+0x43b/0xfd0 [ 2965.671148][ C1] net_rx_action+0x35c/0xd40 [ 2965.675729][ C1] __do_softirq+0x2ea/0x7f5 [ 2965.693821][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2965.888185][ C0] sd 0:0:1:0: [sg0] tag#6194 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2965.898923][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB: Test Unit Ready [ 2965.905741][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.915733][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.925676][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.935615][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.945540][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.955463][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.965351][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.975277][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.985235][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2965.995157][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2966.005097][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2966.015042][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2966.024963][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[c0]: 00 00 00 00 00 00 00 00 09:17:10 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x0, 0x0, 0x148, 0x0, 0x148, 0x270, 0x240, 0x240, 0x270, 0x240, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x801, 0x7}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6, 0x29}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 09:17:10 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x300f, 0x9}}) [ 2966.062034][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0xc53b) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/59, 0x3b}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @perf_config_ext={0x2002, 0x80}, 0x109, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 2966.220117][ T9894] usb 5-1: new high-speed USB device number 22 using dummy_hcd 09:17:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0xc53b) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/59, 0x3b}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @perf_config_ext={0x2002, 0x80}, 0x109, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff6377cdb5b524347c47478bdfdb968f3b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945a08ba8c552fc99a742000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e817f9ebfeb82ee2469fb21be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4901f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4000800007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0dfc537c2370be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fda2380806007abcd3bb6e53262f83463acc1f4ebcf33068b222499f8b119e2072d4efea53dc01cf640840ab9a9dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47149da1a6757ed7e97544517f32a976ef3c66e033da46bfa31468eba625d2646710be8b72795ca27f01eacdfe51736c31f7feb6f6030a10e69c903927a5c11effd62911abc72db31c2eeb0a7c7f08bb280c4fc342717c43d8e2192f121cedce1b0440d46fb174da4ac2da3bc30bf90ad8209f2644ff87aec60a58a490e012785e2d04eba58a52016a15d9e9bcec24a3230a7bff038000000000003a3964045af092de78a6c1f37a7670679a05b93728ba9b7ef8ce392c4704d324b954be4d817cc3a5d5096e15b1aceeaf5631a8e510ad0c0467e033ce6c4e989c2e0f8b947ad687df3f5a18a26163815865e05ca718ece427f792ce459a0900000000000000567451000000000000000000da5fad4927bcc92b26fc45d76e64a428257381d2e46d6adc68cf5da791865bb3a834ecb6ed99147efcc54bcb21c16ccc8e65a5fc0b336a01c1fb7ea763dd96c7a04b16867bec7ab5ed9604a5f0496f5b974848e02e7c1f1e8963cb608adb66979a5d28770000000000000000000000000000becb0400000000000000000000000000000d47e303d48a3cfcdffbe6e2cab240791b859bdef52d146417949d1482de470562cad1f8109ed92d491c96993e142277f4af25162c284daec683442dd50939da561acf522f7212fa88a8d345167fa45788c754ce128139c02259397e9a63bbe06791348e4ee3b290e66834c367bc851072014b022e9c177414bd326d7dba86cfc10488721f0c9d9c5c240c3c4a32516f4db3ae0b0ee06d4f49c3a64362da9cd665c15e7c394c4182499ccc411d5f7d"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 2966.589950][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2966.601070][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2966.611127][ T9894] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2966.620381][ T9894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2966.724436][ T9894] usb 5-1: config 0 descriptor?? [ 2966.735020][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2967.088950][ T9894] usbhid 5-1:0.0: can't add hid device: -71 [ 2967.095281][ T9894] usbhid: probe of 5-1:0.0 failed with error -71 [ 2967.158176][ T9894] usb 5-1: USB disconnect, device number 22 [ 2967.619675][ T9894] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2967.769745][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2967.806733][ C1] sd 0:0:1:0: [sg0] tag#6195 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2967.817426][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB: Test Unit Ready [ 2967.824207][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.834128][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.844073][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.854029][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.863949][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.873854][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.883783][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.893707][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.903633][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.913556][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.923460][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.933361][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2967.943309][ C1] sd 0:0:1:0: [sg0] tag#6195 CDB[c0]: 00 00 00 00 00 00 00 00 [ 2967.946311][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2968.012476][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2968.023696][ T9894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2968.033856][ T9894] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 2968.043129][ T9894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:17:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x300f, 0x9}}) 09:17:12 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x0, 0x0, 0x148, 0x0, 0x148, 0x270, 0x240, 0x240, 0x270, 0x240, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x801, 0x7}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6, 0x29}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 09:17:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0xc53b) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/59, 0x3b}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @perf_config_ext={0x2002, 0x80}, 0x109, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 09:17:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="f0000000100001"], 0xf0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x1c435b2b, 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/225, 0xe1}, 0x0) [ 2968.505189][ T9894] usb 5-1: config 0 descriptor?? [ 2968.547808][ T9894] usb 5-1: can't set config #0, error -71 [ 2968.611313][ T9894] usb 5-1: USB disconnect, device number 23 09:17:13 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x300f, 0x9}}) [ 2968.880025][ C0] sd 0:0:1:0: [sg0] tag#6197 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2968.890734][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB: Test Unit Ready [ 2968.897526][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.907316][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.917174][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.927053][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.936890][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.946724][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.956552][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.967547][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.977325][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.987167][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.996992][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2968.997024][ C1] sd 0:0:1:0: [sg0] tag#6196 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2968.997161][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB: Test Unit Ready [ 2969.006871][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.017351][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.023914][ C0] sd 0:0:1:0: [sg0] tag#6197 CDB[c0]: 00 00 00 00 00 00 00 00 [ 2969.033599][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.060620][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.070549][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.080459][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.090389][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.100301][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.110212][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.120128][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:17:13 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) [ 2969.130049][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.139954][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.149882][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2969.159814][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[c0]: 00 00 00 00 00 00 00 00 09:17:13 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x0, 0x0, 0x148, 0x0, 0x148, 0x270, 0x240, 0x240, 0x270, 0x240, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x801, 0x7}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6, 0x29}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) [ 2969.191616][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="f0000000100001"], 0xf0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x1c435b2b, 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/225, 0xe1}, 0x0) 09:17:14 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x0, 0x0, 0x148, 0x0, 0x148, 0x270, 0x240, 0x240, 0x270, 0x240, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x801, 0x7}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6, 0x29}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 09:17:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 09:17:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0xc53b) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/59, 0x3b}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @perf_config_ext={0x2002, 0x80}, 0x109, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 2969.837181][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:14 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') unshare(0x600) ioctl$BLKIOOPT(r0, 0xb702, 0x0) 09:17:14 executing program 2: r0 = memfd_create(&(0x7f0000000240)='#! \x13\xdb\xb9>D\xc1\x95\xa3\x8a\x91C\xd6\x9fA\xe9\xfb7\xb6\xe5,\x19\xb2y\x02MO&\xcb*p<\xa4\x84\xfa5\xd7YX]Gkp`f\x96X\x96_\x13K0\'s\xe0\xce*\x83Q\x8b\xdc 9\xb6\x7f*\xe8\xc6\xff\xe7[\xb4\xb9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xb0\x9b\xce\xe1\xf4\b.#P\xe6\xcd\xd3\xe8\x8ah\x8fv\xc0\xcb\xd5\xe2\xe7\x1f\xa2aV\x90\xa1a\xb2\xf6\xfe\x01O\xcdd\xd5\xbdh\xa3\xedO\xfe\x8b\fo\xcd\xab', 0x3) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 09:17:14 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090250000101000000090400000002060000052406000005240000000d240f01000000007201000000152412"], 0x0) 09:17:14 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') unshare(0x600) ioctl$BLKIOOPT(r0, 0xb702, 0x0) 09:17:14 executing program 2: r0 = memfd_create(&(0x7f0000000240)='#! \x13\xdb\xb9>D\xc1\x95\xa3\x8a\x91C\xd6\x9fA\xe9\xfb7\xb6\xe5,\x19\xb2y\x02MO&\xcb*p<\xa4\x84\xfa5\xd7YX]Gkp`f\x96X\x96_\x13K0\'s\xe0\xce*\x83Q\x8b\xdc 9\xb6\x7f*\xe8\xc6\xff\xe7[\xb4\xb9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xb0\x9b\xce\xe1\xf4\b.#P\xe6\xcd\xd3\xe8\x8ah\x8fv\xc0\xcb\xd5\xe2\xe7\x1f\xa2aV\x90\xa1a\xb2\xf6\xfe\x01O\xcdd\xd5\xbdh\xa3\xedO\xfe\x8b\fo\xcd\xab', 0x3) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 09:17:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="70020000", @ANYRES16=r3, @ANYBLOB="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"], 0x270}}, 0x0) [ 2970.433901][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2970.635239][ T3265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 09:17:15 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') unshare(0x600) ioctl$BLKIOOPT(r0, 0xb702, 0x0) 09:17:15 executing program 2: r0 = memfd_create(&(0x7f0000000240)='#! \x13\xdb\xb9>D\xc1\x95\xa3\x8a\x91C\xd6\x9fA\xe9\xfb7\xb6\xe5,\x19\xb2y\x02MO&\xcb*p<\xa4\x84\xfa5\xd7YX]Gkp`f\x96X\x96_\x13K0\'s\xe0\xce*\x83Q\x8b\xdc 9\xb6\x7f*\xe8\xc6\xff\xe7[\xb4\xb9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xb0\x9b\xce\xe1\xf4\b.#P\xe6\xcd\xd3\xe8\x8ah\x8fv\xc0\xcb\xd5\xe2\xe7\x1f\xa2aV\x90\xa1a\xb2\xf6\xfe\x01O\xcdd\xd5\xbdh\xa3\xedO\xfe\x8b\fo\xcd\xab', 0x3) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 09:17:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="70020000", @ANYRES16=r3, @ANYBLOB="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"], 0x270}}, 0x0) [ 2971.448844][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2971.462872][ C0] sd 0:0:1:0: [sg0] tag#6151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2971.473778][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB: Test Unit Ready [ 2971.480500][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.490349][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.500202][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.510147][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.519997][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.529845][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.539698][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.549545][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.559404][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.569406][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.579645][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.589501][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2971.599430][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[c0]: 00 00 00 00 00 00 00 00 [ 2971.634191][ T3281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 09:17:16 executing program 2: r0 = memfd_create(&(0x7f0000000240)='#! \x13\xdb\xb9>D\xc1\x95\xa3\x8a\x91C\xd6\x9fA\xe9\xfb7\xb6\xe5,\x19\xb2y\x02MO&\xcb*p<\xa4\x84\xfa5\xd7YX]Gkp`f\x96X\x96_\x13K0\'s\xe0\xce*\x83Q\x8b\xdc 9\xb6\x7f*\xe8\xc6\xff\xe7[\xb4\xb9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xb0\x9b\xce\xe1\xf4\b.#P\xe6\xcd\xd3\xe8\x8ah\x8fv\xc0\xcb\xd5\xe2\xe7\x1f\xa2aV\x90\xa1a\xb2\xf6\xfe\x01O\xcdd\xd5\xbdh\xa3\xedO\xfe\x8b\fo\xcd\xab', 0x3) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 09:17:16 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/net\x00') unshare(0x600) ioctl$BLKIOOPT(r0, 0xb702, 0x0) 09:17:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 2972.493176][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.902826][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x110004, 0x0) sendto(r1, &(0x7f0000000200)="05", 0x1, 0x0, 0x0, 0x0) 09:17:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="70020000", @ANYRES16=r3, @ANYBLOB="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"], 0x270}}, 0x0) 09:17:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:17 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x400448c9, 0x0) [ 2973.529445][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2973.581141][ T3301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 09:17:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000001c0)=0x8, 0x4) 09:17:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:18 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r8, 0x0, 0x86ffde, 0x0) 09:17:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="70020000", @ANYRES16=r3, @ANYBLOB="0904000000000000000001000000480208806800008024000200b1817a1bbc99c21e4749e0df980e2c28a460054243d885c02942ab58be5aaaf214000400a64fd6d9ac1414aa000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000a00010000002800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffb40100802400010000000000000000000000000000000000000000000000000000000000000000008c010980240100800600010002000000080002007f0000010500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000051ea7e20113c7bbf000000000064000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000ffff00000000050003000000000014000200776730"], 0x270}}, 0x0) 09:17:18 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000017c0)={0x3, 0xfffffffb}) [ 2974.446049][ T3321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 09:17:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000001c0)=0x8, 0x4) [ 2974.572827][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:19 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') 09:17:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:19 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20fe85c5ffffff7f000000004a00000000000000202db300"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35780000000b6215dd33459"}}], 0x1c) 09:17:19 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r8, 0x0, 0x86ffde, 0x0) 09:17:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000001c0)=0x8, 0x4) 09:17:20 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo={0x5}}}}}, 0x0) [ 2975.609266][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$null(0xffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x281, 0x0) write$binfmt_misc(r1, 0x0, 0x7441) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:17:20 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') [ 2975.929617][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000001c0)=0x8, 0x4) 09:17:20 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$null(0xffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x281, 0x0) write$binfmt_misc(r1, 0x0, 0x7441) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:17:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf87de", 0x8, 0x3a, 0x0, @local, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}, {[], @mlv2_report}}}}}, 0x0) 09:17:21 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') 09:17:21 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r8, 0x0, 0x86ffde, 0x0) [ 2976.654401][T30065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:17:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 09:17:21 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$null(0xffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x281, 0x0) write$binfmt_misc(r1, 0x0, 0x7441) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:17:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf87de", 0x8, 0x3a, 0x0, @local, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}, {[], @mlv2_report}}}}}, 0x0) 09:17:21 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') [ 2977.530792][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) 09:17:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf87de", 0x8, 0x3a, 0x0, @local, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}, {[], @mlv2_report}}}}}, 0x0) [ 2977.691182][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:22 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$null(0xffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x281, 0x0) write$binfmt_misc(r1, 0x0, 0x7441) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:17:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000b0700000500000000000000004c", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012000c000100626f6e64000000001c00020008000100040000000a001a00e0"], 0x4c}}, 0x0) 09:17:22 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r8, 0x0, 0x86ffde, 0x0) 09:17:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf87de", 0x8, 0x3a, 0x0, @local, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}, {[], @mlv2_report}}}}}, 0x0) [ 2978.322336][ T3404] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2978.330722][ T3404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) [ 2978.637119][ T3404] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2978.645384][ T3404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:17:23 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) 09:17:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) [ 2978.732425][T30065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.969325][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000b0700000500000000000000004c", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012000c000100626f6e64000000001c00020008000100040000000a001a00e0"], 0x4c}}, 0x0) 09:17:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) 09:17:24 executing program 4: syz_usb_connect(0x2, 0x34, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) 09:17:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) 09:17:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="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"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) [ 2979.649924][ T3502] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2979.658258][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2979.770791][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000b0700000500000000000000004c", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012000c000100626f6e64000000001c00020008000100040000000a001a00e0"], 0x4c}}, 0x0) 09:17:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) [ 2980.118458][T16790] usb 5-1: new full-speed USB device number 24 using dummy_hcd 09:17:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) 09:17:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="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"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) [ 2980.372289][ T3562] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2980.380736][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2980.508922][T16790] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2980.519831][T16790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 2980.531164][T16790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2980.544324][T16790] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 2980.553633][T16790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:17:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) [ 2980.734568][T16790] usb 5-1: config 0 descriptor?? [ 2980.760548][ T3541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2980.812214][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:25 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="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"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) [ 2981.012943][T16790] iowarrior 5-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 09:17:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000b0700000500000000000000004c", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012000c000100626f6e64000000001c00020008000100040000000a001a00e0"], 0x4c}}, 0x0) [ 2981.142641][T16790] usb 5-1: USB disconnect, device number 24 [ 2981.195128][T16790] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected 09:17:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="5d8091bea32a504464f99f1eb44a9d2cb978c6987ddeecef3dd49a08c7e2f36ad91221477bd34452989ea95cae29c1ced26aeaa3906e7479f19c019f52585e7cf9f20dc72682fb5f5020813279121320695f14d3265e19d6f7c60075646854e6fb1479e3b71112db15ae6160075ad3bc92930c411c52a0ec627fe4c578da3f84fe5e046057a6cd0cd8a9a32bb506f5964b3dcb2ffbc8764ecc3c84ad9fb376d382bd468317ed334e895705995aec7092664f71474037f32b8143993abf918c93ce622d552548f27d7c020a7316f0017dcb9c40f63f33b9ce4ac88ee4c1207e544471968f30e7b6994f44dec29875806d77216400008a03bca255388bbbfcf78ca35d63c988f230c23cf31fa3d436c7f28fe5afdbcdb8dfbdaee0f677e15abc954e92db69479d55ef543180d618e3500ba4cc6b4677060b197b61811587dc176dd912b1d915f1431307d2f5492cc2d5517fb0f21b2763690086c03ea8fa66545688ad8b67e06ac50975849e401f2b42233fc14af1dba46931ac86146664ec3bb3cf6f3f09f022122a1eb51266f3b59ba63047ff8bc9fa2c1d00838476b5c9f1d3fc52a41f5255202efb85042e2e7efb38a635ac3ed9acfc8ddd2f36efb283e0c80bd884f799c30f41994a128af9349abe5e18bc883fc9c71210c62a909f074b91055aefe1c46400c6b3f8d1c98387c5acdc952a3a492db367cae6b2bbf67c48aca37f8b0d05ec7152d75a185d225d9f4c8f604a9c71dadf97c7c8e98eec09688f08689896ffba1f80b9d25b53d533eff60990ec0f2ca0fbdd4e26f3ab76057902614c3e6b61489a729db87111d0421ed5a85c05a76433d2106e964677a8cef926dff3f397920dce4e450846cc5902dd108d662313951b356008c6c51ff602cf56e3c39026ba0e1eba12cf78649b04c7205464bf513194983e0e260ec5597d3d82b6fe89c8e95b321026ca7e6b2b18f5fcfa68978364f64c20186450eb87123b3e903e49863f725c1719a14a3aaf72c07d108a6539b9981d6278142e0dd6a0bcb3f2df97959e96ced089eaa93bb3cc0238a6717dfa5b486a231842287d7c3dbfcf7f0ca8670faefb15c6cc45f917f2967094d7efaef06eafbdb670e564575b99d13c007eee87332b495fd7cab989694847b61d7342873468a0885b42ef483ed4fe1eb4066d7ca4c25fdd4eb0f768185ab18d1d4936f704a5fe3c26aba2d40d363d787d92cd9af41882eb3c4f253457aef09ec14eaf2ce1a0aab88ca69bbcae334ee6a549731e3ae7a1a77fccd1397263506c6b9fa7939420cf9328c1bb78a3d6bc69812794a3b0458b59358978c5df3d7c2ab064de1e7209bd7706354375a19c933c1a93d9a6a4b79711f408ba1c34994fa5f42a85390fe29b2109c35c64ce27d2e4034000dfeae01cee410e5a2ad723402aa7a989689ae873f0dc40c969ae510766d4ef7833017d1761f1ef250a5a6df5bf329088301a87800d608f543bb13da8fb8e0c896d4e866b45f63aad776722c362dc07ca7f8d8d1b2a233cca7f3c621a113aa539ef64c993dad289f557122486ba15314f1920234e6de23a214a3f73720faf7ae8838765f09bae008a399bd61fcc6486fa5da25db018ebf66ea5ed290a4373f53da636dbcc05f13c942adb0a50dfd3b57614191735c79b2b42d6b274c59daad600f02e06be88053992fe96787f196e298bc776c1b422a0ad3247be061d701d48f7ecedc04ec6bdd38e4553b129fa5f2d29f4db05c05dd714febceb8a7d12351ae59358c9f56b996e5e612bee7c37a35571957728ee43fd0667d86859d93eb47093e49bab0f3e6e476ce15faa4c6ffe57546f8022967bb2dc76374698fd3409b8d0fb8c32a021579a3fc7fc2e4d3360c7c6228ab1fe807404104d331b15a3f971a6604e5e1706d35eef978175088b8e3400815a87e1d50350053316e2a493627c41fe1435e91bb2dc5214e0b0074afe5e6b5732441c60801257e6d26d121f4b520e2e89ebbc88e2a480d7ed35df28b7b67c710ed6642748e184d3ffd92904e540321ad779f4847793945b306401e2e6e0ce05962c43e533a80e9f35d4f0fcab3cc380dff8adf071c5e289f5aea4debecd75d88d9879db6c588f3d79a198cf43d24b63dc7dac402aa84d711f3cf6e8b2ddae7ab4275d1d2c55e60237e857fd5e37f922da038224cd75cc4716e4848aa2928f05ed58231673b1bd0d7ef3e76603d7fdf82617338a836cf8abd1963ef25f8ef2dfde2754aae4b4fe0deece13517361a6b002a7a0408ecf2fe7717446bc4c83da4049c24ef3469dc89ee889dcdc7a066702ff71e9d2c5285a5fa00ca1d624ebac5c85944249ab0717035189ab955688cbb9dd9e8a129a2d8abf0896d0ee2715d29bbba415e0c4ad24bd3908471acdf0a5e13ba1b136b13d3897f885943e35345a523d25e6d7bf99ddd3cea273b05dcf64556b86c7f2e5bee2aa7654a05583a69966dd901199e7df6acfb300f217d3fc73abb3599e6a1701836b48ca806b846713a23d3a17375d631d9634b9e6657a1244486b6d7e00e5e4d9a1beb2cddc8173b06357be547d7bb601c626eaff6fe48f2522d1ffbc8a4d3354a2d29a7f7dc63c1fe0e902f711bfa8ed47932cccd9fde7740b9f8228e4354ea9730d45224aa9d392ee1843152afb6a06b6a7e5f61ed9f1ea9d47f5a797404bb2fa2ddf6775ec5800bc3bb27f274934f8da34ce75e82495ec9baf3b60a1f89d40aa8ef4e7398e26b69ae4eace13329ebc0c5d1daa556adc1efe17ab7bbddb1d39ca60cd7520f9d3abe93fb444a5324294d54fce72ff691c77b586b6714f799c19f6ba76336e88274199b411adbd84d6ed720fc826969a87e748043da4b5188874eba891d422519a18f33e67b758059328aacd506e82821881e64c9cd4824571ce66acb6d3bede6f96bcdb00c8af65e6c7c0828cb76309c458e30c665e89516cb2ad02ea6adf68917f97e7b389b239f212136f48730c163f188b39794071b25877301adf8fa856aa279fb3edf347212c365b51bbbfd67207f1bf44ff464d12536864eea007d1225b15b713133ddb7cc5d5558dbce455ce0f6f736df8c0fd1a309bfcb132c79cff58207008a8e63137368fa03981d4c560e3d09a4fe3f8bde246ef306e04ceadfc0a1dadcd4692ed3121da854d3b0ebfe347c6f18608522c2f0e1e0edbb6d0717153ef3cdde116115b1b733de267d2b803cb71eda1cb15fe47306c44fada820435249a81768ffdad4be8779b017a2d90c7677adda16224f1614cadf69a7332a923344e32248433cd08d9af049b060811e3c5475556b8d39751d9972490e6e222ead1b63ea2ee10d4def2c135539ca12afd742a667652833cb32c0ae60fe2f42766b4aa2f8dbde4883b33c4fbe900440abb9bf2930c32edd92cfbcdf50d1e98404a226b497d997cc10313198e4fee10eb60477ee7b7d09e8bf1d167a7f00d3aaa92edf05876650980a508772e287d0bc4837463c0f3308d1c7fe0aa9de55bcc7e99f3d2e9de650df327e8fc96156423a79ee7a864a274ddd338e41c0864b4b0fa18e30301a405309b6127e953dd519ff5075def9f783e820faf9cc60131c9a061deba6555d770de489d043cc961a530ece05422b12cf24cd8cb84b2d869769b26637250ba91e5085633f521fcc40d739bc69be9d5e996d3ad6921cf6a7bce759139255efb670376586e3f4ba6edb67d7caad11abb7c46a3295d52de6ac728bfa2e3886d68ce2eab89cfdbd6d8377d65763fe79bf6cb614029f90a9a70b1bdbf227a5157ce93d4e152bff3bb5081c482a204a20677afdc23cd2db6c11c78bacd787de0df669b4082d87d03e4d7f0631950e9aa7929d1b6d6bcd81d38910db826626faa1316ade678ae48b63bfb58a4323e858ab317e824b21f468f4deb371d364503b49ebb78e03259980d39aac5490a7f0a875771f964034bcbfd249b85a5ed9e4d28cef7475f6fb9463f3cff83058e0145ae55b439cf2dc18e8d34aace2f522df7fd01eff7bfdf7efaa60aff1377367e6e2964d7c2e31237655204fdb3947fe5efb5d8c7b7ffa82ec8dc5fb1d24e86795caa1200c77c02bd88da8346816fbab2a04453904a79f4ef11d5eedfe4f4b986095d650ecbf21f0cd67dd1714c692688ab8e1ac07aff2f4802a90e3576bacfa2e8c1a7ae86676c332b57184b3663e76c73bbe1a866c0b001bfefeb15b8c9033df1a84755b81f7d360487eaf4bae48a800594da06e6b63e12f09c18229252c3e1fd623d1f489bbfa5a916ab481af0e47c61f1d330b164e6b533601e9dd94709978d819c558b166b232b00b529b8fff39c6cfae0cdd703e5a953432c4d19916a7112b1e8c128d57cef9af0dc215b4f8427f51898331a46c355a98b234a0ff1d7f1149f62a464d593176317ae6fb4c4724e62722b08dcf27e745e4fa5e24e528a8742de5550053a0f57cb8fde907b73b06533c100ea70a5c5a0c1c4a4e4ecb15c9b07c2f680829752c074c3ad5856801a1df95a18f6f3d3495202f879967ec005ec24956403564eac996ad2148a04eb4b09c847bd0fb1fdbfda7277fe0602b4df913e8d775def0ae90e549d59b23d786be6c55e11158464a94d11da6021711f5ac968a08aa66826df381c8a0dcae051753d335530d1f42aee7f9965672d0d9d92e91f6768830dd432146bf57c9757a7bf87776ce738960eeee8270fd7a58dd250dd47e624b284adbfbdc68bd53a0540f3d91c26c895a8a183c4a6d5ec35c68e8d09b2a8308058cc660ae5f7765b684536daa5b25bda84962f2b259dc274b9bf437cd5b9e4246de03d4a7183ea2a873cf0d8af11d59cb075f35597078e62960974f514887639ba9e67532df66f72143ede549808b2ee3f62164d667ec2c1cf8cff89475d31dada050aafa506f52c2bfea5f4a2fc5c1b03fe7d7576c984e7d88b64a7b3db47848cb4bb47b5f5bd7f76bc6780d6911ec2d7e4f9fae3437d3ea6f7ff75442b6cdc08a3717fcbe34bac8a98a70658826105a5976fe2e22bc08385b0f45dffdb03b738615d1ad6b1b19d91f40a06a50110cf43bdd6f103570a35605ae4b12fbec2a0571444f370110491891752557221ec0b68c3bfb05adfae688cc921f13b5946113068462cdb511e0725ab0beefa86d9e1e43e82996a049450a271dcc35b4108e7f1efba5a2cdac67a7377b687bb285289918d9dd004bbf1ad038997d2fe722c658e467329eab11a31690eacbc90807ef311de51417f63eb2ff2f4faac16c3d279796515ee778642da61fb72660ecd587a69ff4ae8447fb585e8d2f74d625512564804545aff5a88f09869b4c5b82a51547d0c59daa931d2576e42cc11a05929a46dbe919bd3bfc114f8cf5c2260af52f67377447aca6c8f85cc9bbc86b7545230dab4f7b5c46fd0b9bda4bceab5b4f73bcf91d5b8b352708648941d5e00d92dcb2a8f5d0a48adcc40aa0f41d44604006256cdd03275b0e4e1baf6fcc8543247fbdc3b67a98eba010755476b2b3b3b1fe7df92427f2ba5b8952b566309e6b51652ed8ee79becf861f9542f42799ff5e0d8e16a0380544cc38aa3969b680b68e7104f1d63d7d644afcac92a512d7a9ff5f10b6332a9ef783f24e4123e2c145de688d90854aca9c59ac5d5a54fd531adf2fe9e162889a736c9bfb01adf97d4ee0ba2ebecea746f816f8d34f9a894fdd84967ed5093b7f109cf7e0520e0ee805691a482737bcceee81026f077f5d4cc610fc0f66d8b6fc01d0d596ca214c4fde0ac03a10c4272d19febe6f3ec84e6fc0ff45ac4e34c8e00fd69389693400bd64e07da7594fcb7cf95e5a32fcbe3795b63e1819f2615770214d6c6a9f15f493fdfc66388a370842eb524110a6669a770dd8467aef59203f4772704c31000"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) 09:17:25 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="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"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) [ 2981.469060][ T3651] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2981.477728][ T3651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2981.848629][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2981.886889][T16790] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 2982.008602][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2982.298178][T16790] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2982.309096][T16790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 2982.320326][T16790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2982.333584][T16790] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 2982.342923][T16790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2982.521426][T16790] usb 5-1: config 0 descriptor?? [ 2982.556651][ T3541] raw-gadget gadget: fail, usb_ep_enable returned -22 09:17:27 executing program 4: syz_usb_connect(0x2, 0x34, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) 09:17:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="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"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) 09:17:27 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="5d8091bea32a504464f99f1eb44a9d2cb978c6987ddeecef3dd49a08c7e2f36ad91221477bd34452989ea95cae29c1ced26aeaa3906e7479f19c019f52585e7cf9f20dc72682fb5f5020813279121320695f14d3265e19d6f7c60075646854e6fb1479e3b71112db15ae6160075ad3bc92930c411c52a0ec627fe4c578da3f84fe5e046057a6cd0cd8a9a32bb506f5964b3dcb2ffbc8764ecc3c84ad9fb376d382bd468317ed334e895705995aec7092664f71474037f32b8143993abf918c93ce622d552548f27d7c020a7316f0017dcb9c40f63f33b9ce4ac88ee4c1207e544471968f30e7b6994f44dec29875806d77216400008a03bca255388bbbfcf78ca35d63c988f230c23cf31fa3d436c7f28fe5afdbcdb8dfbdaee0f677e15abc954e92db69479d55ef543180d618e3500ba4cc6b4677060b197b61811587dc176dd912b1d915f1431307d2f5492cc2d5517fb0f21b2763690086c03ea8fa66545688ad8b67e06ac50975849e401f2b42233fc14af1dba46931ac86146664ec3bb3cf6f3f09f022122a1eb51266f3b59ba63047ff8bc9fa2c1d00838476b5c9f1d3fc52a41f5255202efb85042e2e7efb38a635ac3ed9acfc8ddd2f36efb283e0c80bd884f799c30f41994a128af9349abe5e18bc883fc9c71210c62a909f074b91055aefe1c46400c6b3f8d1c98387c5acdc952a3a492db367cae6b2bbf67c48aca37f8b0d05ec7152d75a185d225d9f4c8f604a9c71dadf97c7c8e98eec09688f08689896ffba1f80b9d25b53d533eff60990ec0f2ca0fbdd4e26f3ab76057902614c3e6b61489a729db87111d0421ed5a85c05a76433d2106e964677a8cef926dff3f397920dce4e450846cc5902dd108d662313951b356008c6c51ff602cf56e3c39026ba0e1eba12cf78649b04c7205464bf513194983e0e260ec5597d3d82b6fe89c8e95b321026ca7e6b2b18f5fcfa68978364f64c20186450eb87123b3e903e49863f725c1719a14a3aaf72c07d108a6539b9981d6278142e0dd6a0bcb3f2df97959e96ced089eaa93bb3cc0238a6717dfa5b486a231842287d7c3dbfcf7f0ca8670faefb15c6cc45f917f2967094d7efaef06eafbdb670e564575b99d13c007eee87332b495fd7cab989694847b61d7342873468a0885b42ef483ed4fe1eb4066d7ca4c25fdd4eb0f768185ab18d1d4936f704a5fe3c26aba2d40d363d787d92cd9af41882eb3c4f253457aef09ec14eaf2ce1a0aab88ca69bbcae334ee6a549731e3ae7a1a77fccd1397263506c6b9fa7939420cf9328c1bb78a3d6bc69812794a3b0458b59358978c5df3d7c2ab064de1e7209bd7706354375a19c933c1a93d9a6a4b79711f408ba1c34994fa5f42a85390fe29b2109c35c64ce27d2e4034000dfeae01cee410e5a2ad723402aa7a989689ae873f0dc40c969ae510766d4ef7833017d1761f1ef250a5a6df5bf329088301a87800d608f543bb13da8fb8e0c896d4e866b45f63aad776722c362dc07ca7f8d8d1b2a233cca7f3c621a113aa539ef64c993dad289f557122486ba15314f1920234e6de23a214a3f73720faf7ae8838765f09bae008a399bd61fcc6486fa5da25db018ebf66ea5ed290a4373f53da636dbcc05f13c942adb0a50dfd3b57614191735c79b2b42d6b274c59daad600f02e06be88053992fe96787f196e298bc776c1b422a0ad3247be061d701d48f7ecedc04ec6bdd38e4553b129fa5f2d29f4db05c05dd714febceb8a7d12351ae59358c9f56b996e5e612bee7c37a35571957728ee43fd0667d86859d93eb47093e49bab0f3e6e476ce15faa4c6ffe57546f8022967bb2dc76374698fd3409b8d0fb8c32a021579a3fc7fc2e4d3360c7c6228ab1fe807404104d331b15a3f971a6604e5e1706d35eef978175088b8e3400815a87e1d50350053316e2a493627c41fe1435e91bb2dc5214e0b0074afe5e6b5732441c60801257e6d26d121f4b520e2e89ebbc88e2a480d7ed35df28b7b67c710ed6642748e184d3ffd92904e540321ad779f4847793945b306401e2e6e0ce05962c43e533a80e9f35d4f0fcab3cc380dff8adf071c5e289f5aea4debecd75d88d9879db6c588f3d79a198cf43d24b63dc7dac402aa84d711f3cf6e8b2ddae7ab4275d1d2c55e60237e857fd5e37f922da038224cd75cc4716e4848aa2928f05ed58231673b1bd0d7ef3e76603d7fdf82617338a836cf8abd1963ef25f8ef2dfde2754aae4b4fe0deece13517361a6b002a7a0408ecf2fe7717446bc4c83da4049c24ef3469dc89ee889dcdc7a066702ff71e9d2c5285a5fa00ca1d624ebac5c85944249ab0717035189ab955688cbb9dd9e8a129a2d8abf0896d0ee2715d29bbba415e0c4ad24bd3908471acdf0a5e13ba1b136b13d3897f885943e35345a523d25e6d7bf99ddd3cea273b05dcf64556b86c7f2e5bee2aa7654a05583a69966dd901199e7df6acfb300f217d3fc73abb3599e6a1701836b48ca806b846713a23d3a17375d631d9634b9e6657a1244486b6d7e00e5e4d9a1beb2cddc8173b06357be547d7bb601c626eaff6fe48f2522d1ffbc8a4d3354a2d29a7f7dc63c1fe0e902f711bfa8ed47932cccd9fde7740b9f8228e4354ea9730d45224aa9d392ee1843152afb6a06b6a7e5f61ed9f1ea9d47f5a797404bb2fa2ddf6775ec5800bc3bb27f274934f8da34ce75e82495ec9baf3b60a1f89d40aa8ef4e7398e26b69ae4eace13329ebc0c5d1daa556adc1efe17ab7bbddb1d39ca60cd7520f9d3abe93fb444a5324294d54fce72ff691c77b586b6714f799c19f6ba76336e88274199b411adbd84d6ed720fc826969a87e748043da4b5188874eba891d422519a18f33e67b758059328aacd506e82821881e64c9cd4824571ce66acb6d3bede6f96bcdb00c8af65e6c7c0828cb76309c458e30c665e89516cb2ad02ea6adf68917f97e7b389b239f212136f48730c163f188b39794071b25877301adf8fa856aa279fb3edf347212c365b51bbbfd67207f1bf44ff464d12536864eea007d1225b15b713133ddb7cc5d5558dbce455ce0f6f736df8c0fd1a309bfcb132c79cff58207008a8e63137368fa03981d4c560e3d09a4fe3f8bde246ef306e04ceadfc0a1dadcd4692ed3121da854d3b0ebfe347c6f18608522c2f0e1e0edbb6d0717153ef3cdde116115b1b733de267d2b803cb71eda1cb15fe47306c44fada820435249a81768ffdad4be8779b017a2d90c7677adda16224f1614cadf69a7332a923344e32248433cd08d9af049b060811e3c5475556b8d39751d9972490e6e222ead1b63ea2ee10d4def2c135539ca12afd742a667652833cb32c0ae60fe2f42766b4aa2f8dbde4883b33c4fbe900440abb9bf2930c32edd92cfbcdf50d1e98404a226b497d997cc10313198e4fee10eb60477ee7b7d09e8bf1d167a7f00d3aaa92edf05876650980a508772e287d0bc4837463c0f3308d1c7fe0aa9de55bcc7e99f3d2e9de650df327e8fc96156423a79ee7a864a274ddd338e41c0864b4b0fa18e30301a405309b6127e953dd519ff5075def9f783e820faf9cc60131c9a061deba6555d770de489d043cc961a530ece05422b12cf24cd8cb84b2d869769b26637250ba91e5085633f521fcc40d739bc69be9d5e996d3ad6921cf6a7bce759139255efb670376586e3f4ba6edb67d7caad11abb7c46a3295d52de6ac728bfa2e3886d68ce2eab89cfdbd6d8377d65763fe79bf6cb614029f90a9a70b1bdbf227a5157ce93d4e152bff3bb5081c482a204a20677afdc23cd2db6c11c78bacd787de0df669b4082d87d03e4d7f0631950e9aa7929d1b6d6bcd81d38910db826626faa1316ade678ae48b63bfb58a4323e858ab317e824b21f468f4deb371d364503b49ebb78e03259980d39aac5490a7f0a875771f964034bcbfd249b85a5ed9e4d28cef7475f6fb9463f3cff83058e0145ae55b439cf2dc18e8d34aace2f522df7fd01eff7bfdf7efaa60aff1377367e6e2964d7c2e31237655204fdb3947fe5efb5d8c7b7ffa82ec8dc5fb1d24e86795caa1200c77c02bd88da8346816fbab2a04453904a79f4ef11d5eedfe4f4b986095d650ecbf21f0cd67dd1714c692688ab8e1ac07aff2f4802a90e3576bacfa2e8c1a7ae86676c332b57184b3663e76c73bbe1a866c0b001bfefeb15b8c9033df1a84755b81f7d360487eaf4bae48a800594da06e6b63e12f09c18229252c3e1fd623d1f489bbfa5a916ab481af0e47c61f1d330b164e6b533601e9dd94709978d819c558b166b232b00b529b8fff39c6cfae0cdd703e5a953432c4d19916a7112b1e8c128d57cef9af0dc215b4f8427f51898331a46c355a98b234a0ff1d7f1149f62a464d593176317ae6fb4c4724e62722b08dcf27e745e4fa5e24e528a8742de5550053a0f57cb8fde907b73b06533c100ea70a5c5a0c1c4a4e4ecb15c9b07c2f680829752c074c3ad5856801a1df95a18f6f3d3495202f879967ec005ec24956403564eac996ad2148a04eb4b09c847bd0fb1fdbfda7277fe0602b4df913e8d775def0ae90e549d59b23d786be6c55e11158464a94d11da6021711f5ac968a08aa66826df381c8a0dcae051753d335530d1f42aee7f9965672d0d9d92e91f6768830dd432146bf57c9757a7bf87776ce738960eeee8270fd7a58dd250dd47e624b284adbfbdc68bd53a0540f3d91c26c895a8a183c4a6d5ec35c68e8d09b2a8308058cc660ae5f7765b684536daa5b25bda84962f2b259dc274b9bf437cd5b9e4246de03d4a7183ea2a873cf0d8af11d59cb075f35597078e62960974f514887639ba9e67532df66f72143ede549808b2ee3f62164d667ec2c1cf8cff89475d31dada050aafa506f52c2bfea5f4a2fc5c1b03fe7d7576c984e7d88b64a7b3db47848cb4bb47b5f5bd7f76bc6780d6911ec2d7e4f9fae3437d3ea6f7ff75442b6cdc08a3717fcbe34bac8a98a70658826105a5976fe2e22bc08385b0f45dffdb03b738615d1ad6b1b19d91f40a06a50110cf43bdd6f103570a35605ae4b12fbec2a0571444f370110491891752557221ec0b68c3bfb05adfae688cc921f13b5946113068462cdb511e0725ab0beefa86d9e1e43e82996a049450a271dcc35b4108e7f1efba5a2cdac67a7377b687bb285289918d9dd004bbf1ad038997d2fe722c658e467329eab11a31690eacbc90807ef311de51417f63eb2ff2f4faac16c3d279796515ee778642da61fb72660ecd587a69ff4ae8447fb585e8d2f74d625512564804545aff5a88f09869b4c5b82a51547d0c59daa931d2576e42cc11a05929a46dbe919bd3bfc114f8cf5c2260af52f67377447aca6c8f85cc9bbc86b7545230dab4f7b5c46fd0b9bda4bceab5b4f73bcf91d5b8b352708648941d5e00d92dcb2a8f5d0a48adcc40aa0f41d44604006256cdd03275b0e4e1baf6fcc8543247fbdc3b67a98eba010755476b2b3b3b1fe7df92427f2ba5b8952b566309e6b51652ed8ee79becf861f9542f42799ff5e0d8e16a0380544cc38aa3969b680b68e7104f1d63d7d644afcac92a512d7a9ff5f10b6332a9ef783f24e4123e2c145de688d90854aca9c59ac5d5a54fd531adf2fe9e162889a736c9bfb01adf97d4ee0ba2ebecea746f816f8d34f9a894fdd84967ed5093b7f109cf7e0520e0ee805691a482737bcceee81026f077f5d4cc610fc0f66d8b6fc01d0d596ca214c4fde0ac03a10c4272d19febe6f3ec84e6fc0ff45ac4e34c8e00fd69389693400bd64e07da7594fcb7cf95e5a32fcbe3795b63e1819f2615770214d6c6a9f15f493fdfc66388a370842eb524110a6669a770dd8467aef59203f4772704c31000"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) 09:17:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="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"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) 09:17:27 executing program 1: prctl$PR_GET_TID_ADDRESS(0x27, &(0x7f0000000240)) 09:17:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r1, 0x1000}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffc0, @loopback}, r6}}, 0x48) dup2(r2, r5) [ 2982.864718][T16790] iowarrior 5-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 2982.966083][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2982.978678][T16790] usb 5-1: USB disconnect, device number 25 [ 2983.019475][T16790] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected 09:17:27 executing program 1: prctl$PR_GET_TID_ADDRESS(0x27, &(0x7f0000000240)) 09:17:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="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"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) 09:17:27 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x80, 0xfffffffffffff001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00', 0x23, 0x11c07}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, &(0x7f00000013c0)="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"/4172, 0x104c, 0x5, 0x0) close(r4) ftruncate(r4, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24600, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer\x00', 0x0, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000001c0)={@hyper}) 09:17:28 executing program 2: syz_usb_connect(0x2, 0x34, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) [ 2983.726887][T16790] usb 5-1: new full-speed USB device number 26 using dummy_hcd 09:17:28 executing program 1: prctl$PR_GET_TID_ADDRESS(0x27, &(0x7f0000000240)) [ 2984.007425][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2984.067245][T16687] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 2984.127993][T16790] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2984.139022][T16790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 2984.150288][T16790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2984.163485][T16790] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 2984.172880][T16790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:17:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) modify_ldt$write2(0x11, &(0x7f00000001c0), 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2984.428372][T16687] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2984.439183][T16687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 2984.450401][T16687] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2984.463684][T16687] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 2984.473193][T16687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2984.480279][T16790] usb 5-1: config 0 descriptor?? [ 2984.520087][ T3723] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2984.828900][T16687] usb 3-1: config 0 descriptor?? [ 2984.856658][ T3730] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2984.900572][T16790] iowarrior 5-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 2984.966615][T16790] usb 5-1: USB disconnect, device number 26 [ 2985.020675][T16790] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 2985.048705][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2985.058828][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2985.087658][ T5266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2985.127636][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2985.152728][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2985.173145][T16687] iowarrior 3-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 2985.274924][T16687] usb 3-1: USB disconnect, device number 106 [ 2985.314879][T16687] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 09:17:30 executing program 4: syz_usb_connect(0x2, 0x34, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) 09:17:30 executing program 5: r0 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='[-@&(\x00', 0x0) 09:17:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x19, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) 09:17:30 executing program 1: prctl$PR_GET_TID_ADDRESS(0x27, &(0x7f0000000240)) 09:17:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@empty}}]}, 0x154}}, 0x0) 09:17:30 executing program 2: syz_usb_connect(0x2, 0x34, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) 09:17:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@empty}}]}, 0x154}}, 0x0) 09:17:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) accept(r3, &(0x7f0000000040), 0x0) 09:17:30 executing program 5: r0 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='[-@&(\x00', 0x0) [ 2986.087555][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2986.337087][ T9024] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 2986.562445][T16687] usb 3-1: new full-speed USB device number 107 using dummy_hcd 09:17:31 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) accept(r3, &(0x7f0000000040), 0x0) [ 2986.738251][ T9024] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2986.749197][ T9024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 2986.760567][ T9024] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2986.773754][ T9024] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 09:17:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@empty}}]}, 0x154}}, 0x0) [ 2986.783101][ T9024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:17:31 executing program 5: r0 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='[-@&(\x00', 0x0) [ 2986.958041][T16687] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2986.968977][T16687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 2986.980302][T16687] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2986.993539][T16687] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 2987.002879][T16687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2987.059668][ T9024] usb 5-1: config 0 descriptor?? [ 2987.080039][ T3789] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2987.155789][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2987.165459][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2987.189595][T19311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2987.330289][T16687] usb 3-1: config 0 descriptor?? [ 2987.340029][ T9024] iowarrior 5-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 2987.356987][ T3793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2987.417832][ T9024] usb 5-1: USB disconnect, device number 27 [ 2987.455736][ T9024] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 2987.631712][T16687] iowarrior 3-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 2987.695736][T16687] usb 3-1: USB disconnect, device number 107 [ 2987.834299][T16687] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected 09:17:32 executing program 4: syz_usb_connect(0x2, 0x34, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) 09:17:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x19, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) 09:17:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@empty}}]}, 0x154}}, 0x0) 09:17:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) accept(r3, &(0x7f0000000040), 0x0) 09:17:32 executing program 5: r0 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='[-@&(\x00', 0x0) 09:17:32 executing program 2: syz_usb_connect(0x2, 0x34, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) 09:17:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) accept(r3, &(0x7f0000000040), 0x0) 09:17:33 executing program 3: r0 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='[-@&(\x00', 0x0) 09:17:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x19, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) 09:17:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x12}]}) 09:17:33 executing program 3: r0 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='[-@&(\x00', 0x0) 09:17:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x14f) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) pipe(0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x5001, &(0x7f0000000040)=0x40000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) unshare(0x40000000) [ 2989.176846][T16790] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 2989.226765][ T9024] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 2989.366676][T16687] net_ratelimit: 4 callbacks suppressed [ 2989.366707][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.568347][T16790] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2989.579144][T16790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 2989.590373][T16790] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2989.597134][ T9024] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2989.603564][T16790] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 2989.614043][ T9024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 2989.614197][ T9024] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2989.623282][T16790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2989.656090][ T9024] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 2989.665274][ T9024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2989.683114][ C1] sd 0:0:1:0: [sg0] tag#6161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2989.693807][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB: Test Unit Ready [ 2989.700616][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.710577][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.720484][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.730384][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.740291][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.750201][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.760106][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.770012][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.779928][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.789842][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.799753][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.804696][ T3872] IPVS: ftp: loaded support on port[0] = 21 [ 2989.809592][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2989.809705][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[c0]: 00 00 00 00 00 00 00 00 [ 2990.024236][T16790] usb 3-1: config 0 descriptor?? [ 2990.070329][ T3855] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2990.132919][ T9024] usb 5-1: config 0 descriptor?? [ 2990.390951][T16790] iowarrior 3-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 2990.447511][ C1] sd 0:0:1:0: [sg0] tag#6162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2990.458191][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB: Test Unit Ready [ 2990.462491][T16790] usb 3-1: USB disconnect, device number 108 [ 2990.464905][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.480854][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.490773][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.500688][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.510631][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.520547][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.530462][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.532541][T16790] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2990.540351][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.540473][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.566765][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.576667][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.586661][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2990.596599][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[c0]: 00 00 00 00 00 00 00 00 [ 2990.614123][ T3850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2990.624840][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2990.625091][T19311] tipc: TX() has been purged, node left! [ 2991.206604][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2991.736308][ T9024] iowarrior 5-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 2991.792694][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2991.811662][ T9024] usb 5-1: USB disconnect, device number 28 [ 2991.825115][ T9024] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected 09:17:36 executing program 3: r0 = fsopen(&(0x7f00000000c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='[-@&(\x00', 0x0) 09:17:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x12}]}) 09:17:36 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7b, 0x77, 0x6c, 0x40, 0x2c7c, 0x121, 0x5315, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x32, 0xaf, 0xab, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f917a72b5c132f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "427f845cb612"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x80, 0xc4, 0x0, [@generic={0x8, 0xb, "8f938b84dd1d"}]}}]}}]}}, 0x0) 09:17:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x19, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) 09:17:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x1000, 0x2, {0x9, @raw_data="4b3fec61e248afe8bd3159dc047659ada40a375ae150b0103646897cbf7e41e878d0757fe0957064540cc65ba7fcc9a5abbc9f3df446092286db11b92433d47d5a745f188394385dfb41b1b34d41dda2c8bf7b74eef76c599f79bc5e8844f62ee0f3604c7b27acda14a03eac04d747afc36bb9954a4b9eb13a286d4f1bd7605e1d75051efc3f9aeacc3ad6341919d0c384556227072eaffbb6f9b2c398100634bb7a0c8d2c394e89fbfa09c0aff87d20b986bf3691e4a508a102ec1c11db5475143bad65534e1be3"}}) 09:17:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@empty, @empty}, 0x9) 09:17:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x205, 0x4) r1 = dup2(0xffffffffffffffff, r0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) clock_gettime(0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5930) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xcd398530) [ 2992.809889][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x1000, 0x2, {0x9, @raw_data="4b3fec61e248afe8bd3159dc047659ada40a375ae150b0103646897cbf7e41e878d0757fe0957064540cc65ba7fcc9a5abbc9f3df446092286db11b92433d47d5a745f188394385dfb41b1b34d41dda2c8bf7b74eef76c599f79bc5e8844f62ee0f3604c7b27acda14a03eac04d747afc36bb9954a4b9eb13a286d4f1bd7605e1d75051efc3f9aeacc3ad6341919d0c384556227072eaffbb6f9b2c398100634bb7a0c8d2c394e89fbfa09c0aff87d20b986bf3691e4a508a102ec1c11db5475143bad65534e1be3"}}) [ 2992.903681][T16790] usb 6-1: new high-speed USB device number 106 using dummy_hcd 09:17:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x12}]}) 09:17:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@empty, @empty}, 0x9) [ 2993.287247][T16790] usb 6-1: config 0 has an invalid interface number: 249 but max is 1 [ 2993.295606][T16790] usb 6-1: config 0 has no interface number 1 [ 2993.302130][T16790] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2993.312896][T16790] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2993.326063][T16790] usb 6-1: too many endpoints for config 0 interface 249 altsetting 23: 167, using maximum allowed: 30 [ 2993.337466][T16790] usb 6-1: config 0 interface 249 altsetting 23 has an invalid endpoint with address 0x0, skipping [ 2993.348425][T16790] usb 6-1: config 0 interface 249 altsetting 23 has 1 endpoint descriptor, different from the interface descriptor's value: 167 [ 2993.361942][T16790] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 2993.371242][T16790] usb 6-1: config 0 interface 249 has no altsetting 0 09:17:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x1000, 0x2, {0x9, @raw_data="4b3fec61e248afe8bd3159dc047659ada40a375ae150b0103646897cbf7e41e878d0757fe0957064540cc65ba7fcc9a5abbc9f3df446092286db11b92433d47d5a745f188394385dfb41b1b34d41dda2c8bf7b74eef76c599f79bc5e8844f62ee0f3604c7b27acda14a03eac04d747afc36bb9954a4b9eb13a286d4f1bd7605e1d75051efc3f9aeacc3ad6341919d0c384556227072eaffbb6f9b2c398100634bb7a0c8d2c394e89fbfa09c0aff87d20b986bf3691e4a508a102ec1c11db5475143bad65534e1be3"}}) 09:17:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x12}]}) [ 2993.847785][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@empty, @empty}, 0x9) [ 2994.247425][T16790] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0121, bcdDevice=53.15 [ 2994.256802][T16790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2994.264938][T16790] usb 6-1: Product: syz [ 2994.269457][T16790] usb 6-1: Manufacturer: syz [ 2994.274201][T16790] usb 6-1: SerialNumber: syz [ 2994.288710][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@empty, @empty}, 0x9) [ 2994.550776][T16790] usb 6-1: config 0 descriptor?? [ 2994.626991][T16790] option 6-1:0.0: GSM modem (1-port) converter detected [ 2994.833105][T16790] option 6-1:0.249: GSM modem (1-port) converter detected [ 2994.877615][T16790] usb 6-1: USB disconnect, device number 106 [ 2994.886669][T16790] option 6-1:0.0: device disconnected [ 2994.887868][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2994.894777][T16790] option 6-1:0.249: device disconnected [ 2995.626443][T16790] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2995.927175][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2996.015112][T16790] usb 6-1: config 0 has an invalid interface number: 249 but max is 1 [ 2996.023722][T16790] usb 6-1: config 0 has no interface number 1 [ 2996.030266][T16790] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2996.041050][T16790] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2996.054137][T16790] usb 6-1: too many endpoints for config 0 interface 249 altsetting 23: 167, using maximum allowed: 30 [ 2996.065600][T16790] usb 6-1: config 0 interface 249 altsetting 23 has an invalid endpoint with address 0x0, skipping [ 2996.076580][T16790] usb 6-1: config 0 interface 249 altsetting 23 has 1 endpoint descriptor, different from the interface descriptor's value: 167 [ 2996.090019][T16790] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 2996.099270][T16790] usb 6-1: config 0 interface 249 has no altsetting 0 [ 2996.277729][T16790] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0121, bcdDevice=53.15 [ 2996.287146][T16790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2996.295283][T16790] usb 6-1: Product: syz [ 2996.300011][T16790] usb 6-1: Manufacturer: syz [ 2996.304758][T16790] usb 6-1: SerialNumber: syz [ 2996.417532][T16790] usb 6-1: config 0 descriptor?? 09:17:41 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7b, 0x77, 0x6c, 0x40, 0x2c7c, 0x121, 0x5315, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x32, 0xaf, 0xab, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f917a72b5c132f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "427f845cb612"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x80, 0xc4, 0x0, [@generic={0x8, 0xb, "8f938b84dd1d"}]}}]}}]}}, 0x0) 09:17:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x205, 0x4) r1 = dup2(0xffffffffffffffff, r0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) clock_gettime(0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5930) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xcd398530) 09:17:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x205, 0x4) r1 = dup2(0xffffffffffffffff, r0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) clock_gettime(0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5930) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xcd398530) 09:17:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x1000, 0x2, {0x9, @raw_data="4b3fec61e248afe8bd3159dc047659ada40a375ae150b0103646897cbf7e41e878d0757fe0957064540cc65ba7fcc9a5abbc9f3df446092286db11b92433d47d5a745f188394385dfb41b1b34d41dda2c8bf7b74eef76c599f79bc5e8844f62ee0f3604c7b27acda14a03eac04d747afc36bb9954a4b9eb13a286d4f1bd7605e1d75051efc3f9aeacc3ad6341919d0c384556227072eaffbb6f9b2c398100634bb7a0c8d2c394e89fbfa09c0aff87d20b986bf3691e4a508a102ec1c11db5475143bad65534e1be3"}}) 09:17:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@empty, @empty}, 0x9) 09:17:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@empty, @empty}, 0x9) [ 2996.475947][T16790] usb 6-1: can't set config #0, error -71 [ 2996.498248][T16790] usb 6-1: USB disconnect, device number 107 [ 2996.736005][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:41 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) 09:17:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x205, 0x4) r1 = dup2(0xffffffffffffffff, r0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) clock_gettime(0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5930) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xcd398530) [ 2996.977561][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}]}, 0x1c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) [ 2997.215920][T16790] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2997.380424][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2997.588949][T16790] usb 6-1: config 0 has an invalid interface number: 249 but max is 1 [ 2997.597467][T16790] usb 6-1: config 0 has no interface number 1 [ 2997.603733][T16790] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2997.614527][T16790] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2997.627707][T16790] usb 6-1: too many endpoints for config 0 interface 249 altsetting 23: 167, using maximum allowed: 30 09:17:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x205, 0x4) r1 = dup2(0xffffffffffffffff, r0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) clock_gettime(0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5930) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xcd398530) [ 2997.639050][T16790] usb 6-1: config 0 interface 249 altsetting 23 has an invalid endpoint with address 0x0, skipping [ 2997.650137][T16790] usb 6-1: config 0 interface 249 altsetting 23 has 1 endpoint descriptor, different from the interface descriptor's value: 167 [ 2997.663708][T16790] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 2997.673058][T16790] usb 6-1: config 0 interface 249 has no altsetting 0 [ 2997.706746][ C1] not chained 290000 origins [ 2997.711377][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.8.0-rc5-syzkaller #0 [ 2997.719526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2997.729583][ C1] Call Trace: [ 2997.732890][ C1] dump_stack+0x21c/0x280 [ 2997.737241][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 2997.742975][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2997.749055][ C1] ? bictcp_cong_avoid+0x30a/0x1850 [ 2997.754259][ C1] ? tcp_rate_gen+0xa8f/0xbb0 [ 2997.758938][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2997.764130][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2997.769949][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2997.776008][ C1] ? should_fail+0x72/0x9e0 [ 2997.780512][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2997.786315][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2997.791512][ C1] ? __should_failslab+0x1f6/0x290 [ 2997.796615][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2997.801807][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2997.807625][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 2997.813683][ C1] ? kmem_cache_alloc+0x166/0xc50 [ 2997.818709][ C1] ? inet_twsk_alloc+0x154/0xbd0 [ 2997.823699][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2997.828902][ C1] __msan_chain_origin+0x50/0x90 [ 2997.833835][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 2997.838602][ C1] tcp_time_wait+0xd9/0x1150 [ 2997.843211][ C1] tcp_rcv_state_process+0xf6e/0x45b0 [ 2997.848574][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2997.854394][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 2997.860453][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2997.865652][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2997.870864][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2997.875447][ C1] ? kmsan_set_origin_checked+0x20/0xf0 [ 2997.880988][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 2997.885498][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2997.890707][ C1] ? tcp_v4_rcv+0x1801/0x5c10 [ 2997.895381][ C1] ? tcp_filter+0xf0/0xf0 [ 2997.899808][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2997.905264][ C1] ip_local_deliver+0x727/0x8d0 [ 2997.910113][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 2997.915127][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 2997.920837][ C1] ip_rcv+0x795/0x810 [ 2997.924831][ C1] ? ip_rcv_core+0x1490/0x1490 [ 2997.929589][ C1] __netif_receive_skb+0x265/0x670 [ 2997.934696][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 2997.940249][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 2997.945882][ C1] process_backlog+0x50d/0xba0 [ 2997.950642][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 2997.956462][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 2997.961736][ C1] napi_poll+0x43b/0xfd0 [ 2997.965976][ C1] ? kmsan_get_metadata+0x116/0x180 [ 2997.971185][ C1] net_rx_action+0x35c/0xd40 [ 2997.975791][ C1] ? net_tx_action+0xdc0/0xdc0 [ 2997.980549][ C1] __do_softirq+0x2ea/0x7f5 [ 2997.985055][ C1] ? ksoftirqd_should_run+0x30/0x30 [ 2997.990242][ C1] run_ksoftirqd+0x25/0x40 [ 2997.994648][ C1] smpboot_thread_fn+0x5f5/0xa90 [ 2997.999590][ C1] kthread+0x551/0x590 [ 2998.003665][ C1] ? cpu_report_death+0x1a0/0x1a0 [ 2998.008692][ C1] ? kthread_blkcg+0x110/0x110 [ 2998.013448][ C1] ret_from_fork+0x1f/0x30 [ 2998.017860][ C1] Uninit was stored to memory at: [ 2998.022888][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2998.028600][ C1] __msan_chain_origin+0x50/0x90 [ 2998.033524][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 2998.038278][ C1] tcp_time_wait+0xd9/0x1150 [ 2998.042856][ C1] tcp_fin+0x23a/0x9f0 [ 2998.046914][ C1] tcp_data_queue+0x1e5c/0xb570 [ 2998.051768][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 2998.057302][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2998.061881][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 2998.066372][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2998.071818][ C1] ip_local_deliver+0x727/0x8d0 [ 2998.076654][ C1] ip_rcv+0x795/0x810 [ 2998.080631][ C1] __netif_receive_skb+0x265/0x670 [ 2998.085730][ C1] process_backlog+0x50d/0xba0 [ 2998.090488][ C1] napi_poll+0x43b/0xfd0 [ 2998.094718][ C1] net_rx_action+0x35c/0xd40 [ 2998.099296][ C1] __do_softirq+0x2ea/0x7f5 [ 2998.103779][ C1] [ 2998.106094][ C1] Uninit was stored to memory at: [ 2998.111111][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2998.116819][ C1] __msan_chain_origin+0x50/0x90 [ 2998.121753][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 2998.126507][ C1] tcp_time_wait+0xd9/0x1150 [ 2998.131086][ C1] tcp_rcv_state_process+0xf6e/0x45b0 [ 2998.136467][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2998.141153][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 2998.145647][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2998.151097][ C1] ip_local_deliver+0x727/0x8d0 [ 2998.155935][ C1] ip_rcv+0x795/0x810 [ 2998.159912][ C1] __netif_receive_skb+0x265/0x670 [ 2998.165012][ C1] process_backlog+0x50d/0xba0 [ 2998.169764][ C1] napi_poll+0x43b/0xfd0 [ 2998.174019][ C1] net_rx_action+0x35c/0xd40 [ 2998.178604][ C1] __do_softirq+0x2ea/0x7f5 [ 2998.185968][ C1] [ 2998.188283][ C1] Uninit was stored to memory at: [ 2998.193299][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2998.199004][ C1] __msan_chain_origin+0x50/0x90 [ 2998.204016][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 2998.208773][ C1] tcp_time_wait+0xd9/0x1150 [ 2998.213350][ C1] tcp_fin+0x23a/0x9f0 [ 2998.217408][ C1] tcp_data_queue+0x1e5c/0xb570 [ 2998.222245][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 2998.227694][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2998.232272][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 2998.236782][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2998.242228][ C1] ip_local_deliver+0x727/0x8d0 [ 2998.247065][ C1] ip_rcv+0x795/0x810 [ 2998.251058][ C1] __netif_receive_skb+0x265/0x670 [ 2998.256173][ C1] process_backlog+0x50d/0xba0 [ 2998.260943][ C1] napi_poll+0x43b/0xfd0 [ 2998.265179][ C1] net_rx_action+0x35c/0xd40 [ 2998.269760][ C1] __do_softirq+0x2ea/0x7f5 [ 2998.274240][ C1] [ 2998.276553][ C1] Uninit was stored to memory at: [ 2998.281569][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2998.287277][ C1] __msan_chain_origin+0x50/0x90 [ 2998.292205][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 2998.296958][ C1] tcp_time_wait+0xd9/0x1150 [ 2998.301533][ C1] tcp_fin+0x23a/0x9f0 [ 2998.305592][ C1] tcp_data_queue+0x1e5c/0xb570 [ 2998.310447][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 2998.315892][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2998.320470][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 2998.324961][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2998.330405][ C1] ip_local_deliver+0x727/0x8d0 [ 2998.335244][ C1] ip_rcv+0x795/0x810 [ 2998.339216][ C1] __netif_receive_skb+0x265/0x670 [ 2998.344315][ C1] process_backlog+0x50d/0xba0 [ 2998.349070][ C1] napi_poll+0x43b/0xfd0 [ 2998.353302][ C1] net_rx_action+0x35c/0xd40 [ 2998.357879][ C1] __do_softirq+0x2ea/0x7f5 [ 2998.362361][ C1] [ 2998.364673][ C1] Uninit was stored to memory at: [ 2998.369687][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2998.375395][ C1] __msan_chain_origin+0x50/0x90 [ 2998.380321][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 2998.385073][ C1] tcp_time_wait+0xd9/0x1150 [ 2998.389655][ C1] tcp_fin+0x23a/0x9f0 [ 2998.393710][ C1] tcp_data_queue+0x1e5c/0xb570 [ 2998.398547][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 2998.403995][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2998.408574][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 2998.413073][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2998.418520][ C1] ip_local_deliver+0x727/0x8d0 [ 2998.423356][ C1] ip_rcv+0x795/0x810 [ 2998.427327][ C1] __netif_receive_skb+0x265/0x670 [ 2998.432438][ C1] process_backlog+0x50d/0xba0 [ 2998.437191][ C1] napi_poll+0x43b/0xfd0 [ 2998.441420][ C1] net_rx_action+0x35c/0xd40 [ 2998.446016][ C1] __do_softirq+0x2ea/0x7f5 [ 2998.450497][ C1] [ 2998.452807][ C1] Uninit was stored to memory at: [ 2998.457838][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2998.463558][ C1] __msan_chain_origin+0x50/0x90 [ 2998.468488][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 2998.473344][ C1] tcp_time_wait+0xd9/0x1150 [ 2998.477921][ C1] tcp_fin+0x23a/0x9f0 [ 2998.481975][ C1] tcp_data_queue+0x1e5c/0xb570 [ 2998.486815][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 2998.492259][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2998.496839][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 2998.501331][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2998.506777][ C1] ip_local_deliver+0x727/0x8d0 [ 2998.511613][ C1] ip_rcv+0x795/0x810 [ 2998.515589][ C1] __netif_receive_skb+0x265/0x670 [ 2998.520796][ C1] process_backlog+0x50d/0xba0 [ 2998.525549][ C1] napi_poll+0x43b/0xfd0 [ 2998.529781][ C1] net_rx_action+0x35c/0xd40 [ 2998.534361][ C1] __do_softirq+0x2ea/0x7f5 [ 2998.538928][ C1] [ 2998.541250][ C1] Uninit was stored to memory at: [ 2998.546273][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 2998.551981][ C1] __msan_chain_origin+0x50/0x90 [ 2998.556908][ C1] inet_twsk_alloc+0xac7/0xbd0 [ 2998.561665][ C1] tcp_time_wait+0xd9/0x1150 [ 2998.566249][ C1] tcp_fin+0x23a/0x9f0 [ 2998.570312][ C1] tcp_data_queue+0x1e5c/0xb570 [ 2998.575155][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 2998.580609][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2998.585190][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 2998.589688][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2998.595149][ C1] ip_local_deliver+0x727/0x8d0 [ 2998.599996][ C1] ip_rcv+0x795/0x810 [ 2998.603968][ C1] __netif_receive_skb+0x265/0x670 [ 2998.609072][ C1] process_backlog+0x50d/0xba0 [ 2998.613826][ C1] napi_poll+0x43b/0xfd0 [ 2998.618060][ C1] net_rx_action+0x35c/0xd40 [ 2998.622643][ C1] __do_softirq+0x2ea/0x7f5 [ 2998.627143][ C1] [ 2998.629459][ C1] Uninit was created at: [ 2998.633697][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 2998.639413][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 2998.644169][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 2998.649616][ C1] alloc_pages_current+0x685/0xb50 [ 2998.654717][ C1] alloc_slab_page+0x11c/0x1240 [ 2998.659563][ C1] new_slab+0x2bf/0x10c0 [ 2998.663796][ C1] ___slab_alloc+0xcd3/0x18a0 [ 2998.668465][ C1] kmem_cache_alloc+0xb70/0xc50 [ 2998.673306][ C1] inet_twsk_alloc+0x154/0xbd0 [ 2998.678061][ C1] tcp_time_wait+0xd9/0x1150 [ 2998.682637][ C1] tcp_fin+0x23a/0x9f0 [ 2998.686714][ C1] tcp_data_queue+0x1e5c/0xb570 [ 2998.691556][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 2998.697018][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 2998.701598][ C1] tcp_v4_rcv+0x57d0/0x5c10 09:17:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x205, 0x4) r1 = dup2(0xffffffffffffffff, r0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) clock_gettime(0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5930) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xcd398530) [ 2998.706090][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 2998.711543][ C1] ip_local_deliver+0x727/0x8d0 [ 2998.716382][ C1] ip_rcv+0x795/0x810 [ 2998.720353][ C1] __netif_receive_skb+0x265/0x670 [ 2998.725458][ C1] process_backlog+0x50d/0xba0 [ 2998.730218][ C1] napi_poll+0x43b/0xfd0 [ 2998.734484][ C1] net_rx_action+0x35c/0xd40 [ 2998.739074][ C1] __do_softirq+0x2ea/0x7f5 09:17:43 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) [ 2998.825566][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2999.387147][T16790] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0121, bcdDevice=53.15 [ 2999.396500][T16790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2999.404635][T16790] usb 6-1: Product: syz [ 2999.409153][T16790] usb 6-1: Manufacturer: syz [ 2999.413923][T16790] usb 6-1: SerialNumber: syz [ 2999.536445][T16790] usb 6-1: config 0 descriptor?? [ 2999.609585][T16790] option 6-1:0.0: GSM modem (1-port) converter detected [ 2999.820600][T16790] option 6-1:0.249: GSM modem (1-port) converter detected [ 2999.976032][T16790] usb 6-1: USB disconnect, device number 108 [ 2999.984476][T16790] option 6-1:0.0: device disconnected [ 2999.993690][T16790] option 6-1:0.249: device disconnected [ 3000.017617][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3000.411129][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:45 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7b, 0x77, 0x6c, 0x40, 0x2c7c, 0x121, 0x5315, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x32, 0xaf, 0xab, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f917a72b5c132f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "427f845cb612"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x80, 0xc4, 0x0, [@generic={0x8, 0xb, "8f938b84dd1d"}]}}]}}]}}, 0x0) 09:17:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macsec0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@empty, @empty}, 0x9) 09:17:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}]}, 0x1c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 09:17:45 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) 09:17:45 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) 09:17:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x205, 0x4) r1 = dup2(0xffffffffffffffff, r0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) clock_gettime(0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5930) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xcd398530) 09:17:45 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) [ 3001.050296][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:45 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) 09:17:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}]}, 0x1c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) [ 3001.475478][ T9894] usb 6-1: new high-speed USB device number 109 using dummy_hcd 09:17:46 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0) [ 3001.867675][ T9894] usb 6-1: config 0 has an invalid interface number: 249 but max is 1 [ 3001.876128][ T9894] usb 6-1: config 0 has no interface number 1 [ 3001.882396][ T9894] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3001.893312][ T9894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3001.906559][ T9894] usb 6-1: too many endpoints for config 0 interface 249 altsetting 23: 167, using maximum allowed: 30 [ 3001.917879][ T9894] usb 6-1: config 0 interface 249 altsetting 23 has an invalid endpoint with address 0x0, skipping [ 3001.928937][ T9894] usb 6-1: config 0 interface 249 altsetting 23 has 1 endpoint descriptor, different from the interface descriptor's value: 167 [ 3001.942459][ T9894] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 3001.951771][ T9894] usb 6-1: config 0 interface 249 has no altsetting 0 09:17:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000a0a0000000000000000f9ffffff070008000a4000000000080008400268"], 0x24}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xa) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x7) 09:17:46 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) [ 3002.086817][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3002.626537][ T9894] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0121, bcdDevice=53.15 [ 3002.635857][ T9894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3002.643986][ T9894] usb 6-1: Product: syz [ 3002.648455][ T9894] usb 6-1: Manufacturer: syz [ 3002.653221][ T9894] usb 6-1: SerialNumber: syz [ 3002.718771][ T9894] usb 6-1: config 0 descriptor?? [ 3002.763471][ T9894] option 6-1:0.0: GSM modem (1-port) converter detected [ 3003.026398][ T9894] option 6-1:0.249: GSM modem (1-port) converter detected [ 3003.081177][ T9894] usb 6-1: USB disconnect, device number 109 [ 3003.089493][ T9894] option 6-1:0.0: device disconnected [ 3003.151627][ T9894] option 6-1:0.249: device disconnected [ 3003.168565][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3003.450118][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:48 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7b, 0x77, 0x6c, 0x40, 0x2c7c, 0x121, 0x5315, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x32, 0xaf, 0xab, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "f917a72b5c132f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "427f845cb612"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x80, 0xc4, 0x0, [@generic={0x8, 0xb, "8f938b84dd1d"}]}}]}}]}}, 0x0) 09:17:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}]}, 0x1c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 09:17:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7}) 09:17:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:17:48 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 09:17:48 executing program 1: socket$kcm(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 09:17:49 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) [ 3005.001445][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3005.011269][T16699] usb 6-1: new high-speed USB device number 110 using dummy_hcd 09:17:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 09:17:50 executing program 1: socket$kcm(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 09:17:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000a0a0000000000000000f9ffffff070008000a4000000000080008400268"], 0x24}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xa) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x7) [ 3005.486195][T16699] usb 6-1: config 0 has an invalid interface number: 249 but max is 1 [ 3005.494563][T16699] usb 6-1: config 0 has no interface number 1 [ 3005.501565][T16699] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3005.512334][T16699] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3005.525472][T16699] usb 6-1: too many endpoints for config 0 interface 249 altsetting 23: 167, using maximum allowed: 30 [ 3005.536804][T16699] usb 6-1: config 0 interface 249 altsetting 23 has an invalid endpoint with address 0x0, skipping [ 3005.547946][T16699] usb 6-1: config 0 interface 249 altsetting 23 has 1 endpoint descriptor, different from the interface descriptor's value: 167 [ 3005.561398][T16699] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 3005.570684][T16699] usb 6-1: config 0 interface 249 has no altsetting 0 09:17:50 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 09:17:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) [ 3006.005764][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.116986][T16699] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0121, bcdDevice=53.15 [ 3006.126635][T16699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.134913][T16699] usb 6-1: Product: syz [ 3006.139220][T16699] usb 6-1: Manufacturer: syz [ 3006.143955][T16699] usb 6-1: SerialNumber: syz [ 3006.275924][T16699] usb 6-1: config 0 descriptor?? [ 3006.329123][T16699] option 6-1:0.0: GSM modem (1-port) converter detected [ 3006.329368][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.485406][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.560316][T16699] option 6-1:0.249: GSM modem (1-port) converter detected [ 3006.639211][T16699] usb 6-1: USB disconnect, device number 110 [ 3006.647372][T16699] option 6-1:0.0: device disconnected [ 3006.656017][T16699] option 6-1:0.249: device disconnected [ 3007.046057][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 09:17:51 executing program 1: socket$kcm(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 09:17:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 09:17:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7}) [ 3007.370920][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.466272][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.555710][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:52 executing program 1: socket$kcm(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) [ 3007.635694][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x20) [ 3007.812768][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.887704][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 09:17:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x20) 09:17:53 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x83, &(0x7f0000000080), 0x8) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 09:17:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000a0a0000000000000000f9ffffff070008000a4000000000080008400268"], 0x24}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xa) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x7) 09:17:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 09:17:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x20) 09:17:53 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9dfc00000000000200f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000e10004003c5811039e15775027ecce66fd792bbf0e5bf5fd9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15b, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 09:17:53 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9dfc00000000000200f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000e10004003c5811039e15775027ecce66fd792bbf0e5bf5fd9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15b, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 09:17:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x20) 09:17:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7}) 09:17:55 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9dfc00000000000200f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000e10004003c5811039e15775027ecce66fd792bbf0e5bf5fd9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15b, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 09:17:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, r2, r4) 09:17:55 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 09:17:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 09:17:55 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) [ 3011.021611][ T4272] net_ratelimit: 209 callbacks suppressed [ 3011.021643][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.119356][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.155254][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.183801][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.221232][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.257140][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.301074][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.342449][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.361717][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.414167][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:17:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000a0a0000000000000000f9ffffff070008000a4000000000080008400268"], 0x24}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xa) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x7) 09:17:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, r2, r4) 09:17:57 executing program 4: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9dfc00000000000200f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000e10004003c5811039e15775027ecce66fd792bbf0e5bf5fd9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15b, &(0x7f0000000400)="c4c691019919da07d87ae49682710adde03f76962314ce8eae2df75511878f43e907000000000000000022addee07bee6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b3c0b4986ddb37106d7edd40808ffdb2dc4a741357baa16dacdcf8432957d83d8c0b2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea235b86495999dd604f5f8e6845a8a8c2e95d09954d467317f1ec9f9a84072163cb1544c90bc985dba0f4632b31e0cc668a8243dfa0a4c446a4bbee61391a2b10e96c0df52ab126a3b83190da0000000000009ecee9bc00003bcf80ad042683e0525098c8a078097cc892088d96ccfbaf01aa9eedce39616f4815b78cded8ff60d625b3dae057ec47c92150351d4275e7c8ab434c9ef5f06c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 09:17:57 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 09:17:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f0000000100)={0x11, {{0x29, 0x0, 0xb000000, @remote}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 09:17:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7}) 09:17:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f0000000100)={0x11, {{0x29, 0x0, 0xb000000, @remote}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 09:17:57 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 09:17:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, r2, r4) 09:17:57 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:17:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f0000000100)={0x11, {{0x29, 0x0, 0xb000000, @remote}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 09:17:58 executing program 5: quotactl(0x0, 0x0, 0x0, &(0x7f0000001000)="a64d") r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0xc2, 0x0, 0x29, 0x3}, 0xe3) 09:18:00 executing program 5: quotactl(0x0, 0x0, 0x0, &(0x7f0000001000)="a64d") r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0xc2, 0x0, 0x29, 0x3}, 0xe3) 09:18:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}}, 0x0) 09:18:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x98) 09:18:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, r2, r4) 09:18:00 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x14031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000484000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_COPY(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000011000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) 09:18:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f0000000100)={0x11, {{0x29, 0x0, 0xb000000, @remote}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) [ 3016.075144][T16790] net_ratelimit: 90 callbacks suppressed [ 3016.075175][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.106081][ T5053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.172822][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.251893][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:18:01 executing program 5: quotactl(0x0, 0x0, 0x0, &(0x7f0000001000)="a64d") r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0xc2, 0x0, 0x29, 0x3}, 0xe3) 09:18:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}) 09:18:01 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80004001ff) 09:18:01 executing program 3: unshare(0x6000400) bpf$BPF_GET_MAP_INFO(0x21, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 3016.682850][ T4351] IPVS: ftp: loaded support on port[0] = 21 [ 3016.811366][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3017.198102][ T4397] IPVS: ftp: loaded support on port[0] = 21 09:18:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a00000072"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:18:02 executing program 3: unshare(0x6000400) bpf$BPF_GET_MAP_INFO(0x21, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 09:18:02 executing program 5: quotactl(0x0, 0x0, 0x0, &(0x7f0000001000)="a64d") r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0xc2, 0x0, 0x29, 0x3}, 0xe3) 09:18:02 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80004001ff) 09:18:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:18:02 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x14031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000484000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_COPY(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000011000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) [ 3017.818882][ T4435] IPVS: ftp: loaded support on port[0] = 21 [ 3017.885067][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:02 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80004001ff) 09:18:02 executing program 5: unshare(0x6000400) bpf$BPF_GET_MAP_INFO(0x21, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 09:18:02 executing program 3: unshare(0x6000400) bpf$BPF_GET_MAP_INFO(0x21, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 3018.433010][ T4471] IPVS: ftp: loaded support on port[0] = 21 09:18:03 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80004001ff) 09:18:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 3018.725051][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:03 executing program 5: unshare(0x6000400) bpf$BPF_GET_MAP_INFO(0x21, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 09:18:03 executing program 3: unshare(0x6000400) bpf$BPF_GET_MAP_INFO(0x21, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 3018.966308][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3019.048369][ T4504] IPVS: ftp: loaded support on port[0] = 21 09:18:03 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80004001ff) 09:18:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:18:04 executing program 5: unshare(0x6000400) bpf$BPF_GET_MAP_INFO(0x21, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 3019.612857][ T4529] IPVS: ftp: loaded support on port[0] = 21 09:18:04 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2f, 0x83, 0x6, 0x40, 0x174f, 0x6a31, 0xd61a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0xa1, 0x81}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 09:18:04 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x14031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000484000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_COPY(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000011000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) 09:18:04 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80004001ff) [ 3020.018574][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f7", 0x300}], 0x1) [ 3020.217007][ T4570] IPVS: ftp: loaded support on port[0] = 21 09:18:04 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) clone(0x4402c500, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x6, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80004001ff) [ 3020.345151][T16790] usb 4-1: new high-speed USB device number 120 using dummy_hcd 09:18:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) [ 3020.657407][ T4591] IPVS: ftp: loaded support on port[0] = 21 [ 3020.839370][T16790] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=d6.1a [ 3020.848812][T16790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3020.963834][T16790] usb 4-1: config 0 descriptor?? 09:18:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) [ 3021.011329][T16790] gspca_main: stk1135-2.14.0 probing 174f:6a31 09:18:05 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="6301000036ee3808d30b55056a690000000109024600010000000009040000000e010000082402060202"], 0x0) [ 3021.066827][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f7", 0x300}], 0x1) 09:18:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) [ 3021.764998][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3021.794929][T16699] usb 3-1: new high-speed USB device number 109 using dummy_hcd 09:18:06 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x14031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000484000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_COPY(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000011000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) 09:18:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f7", 0x300}], 0x1) [ 3022.036126][T16699] usb 3-1: Using ep0 maxpacket: 8 [ 3022.086269][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3022.155162][T16699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3022.165630][T16699] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 3022.175214][T16699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3022.268637][T16699] usb 3-1: config 0 descriptor?? [ 3022.524972][ T4331] usb 3-1: USB disconnect, device number 109 [ 3023.151924][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3023.314787][ T4331] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 3023.583732][ T4331] usb 3-1: Using ep0 maxpacket: 8 [ 3023.732214][ C0] not chained 300000 origins [ 3023.736856][ C0] CPU: 0 PID: 30487 Comm: kworker/u4:5 Not tainted 5.8.0-rc5-syzkaller #0 [ 3023.745351][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3023.755428][ C0] Workqueue: krdsd rds_connect_worker [ 3023.760800][ C0] Call Trace: [ 3023.764090][ C0] [ 3023.766955][ C0] dump_stack+0x21c/0x280 [ 3023.771298][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 3023.777027][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3023.783111][ C0] ? arch_stack_walk+0x346/0x3d0 [ 3023.788059][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.793270][ C0] ? __should_failslab+0x1f6/0x290 [ 3023.798419][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.803627][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3023.809441][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 3023.815607][ C0] ? tcp_parse_options+0x206d/0x2100 [ 3023.820917][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.826126][ C0] __msan_chain_origin+0x50/0x90 [ 3023.831075][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3023.836142][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3023.841954][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.847160][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.852372][ C0] tcp_v4_conn_request+0x201/0x290 [ 3023.857498][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3023.862534][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 3023.867823][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3023.873201][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3023.879019][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 3023.885094][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.890301][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3023.896128][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.901359][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3023.905966][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3023.910478][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.915706][ C0] ? tcp_filter+0xf0/0xf0 [ 3023.920046][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3023.925524][ C0] ip_local_deliver+0x727/0x8d0 [ 3023.930394][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 3023.935423][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3023.941062][ C0] ip_rcv+0x795/0x810 [ 3023.945060][ C0] ? ip_rcv_core+0x1490/0x1490 [ 3023.949837][ C0] __netif_receive_skb+0x265/0x670 [ 3023.954955][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 3023.960506][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 3023.966157][ C0] process_backlog+0x50d/0xba0 [ 3023.970933][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3023.976759][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3023.982052][ C0] napi_poll+0x43b/0xfd0 [ 3023.986311][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3023.991528][ C0] net_rx_action+0x35c/0xd40 [ 3023.996141][ C0] ? net_tx_action+0xdc0/0xdc0 [ 3024.000919][ C0] __do_softirq+0x2ea/0x7f5 [ 3024.005461][ C0] asm_call_on_stack+0xf/0x20 [ 3024.010133][ C0] [ 3024.013089][ C0] do_softirq_own_stack+0x7c/0xa0 [ 3024.018125][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 3024.023342][ C0] local_bh_enable+0x36/0x40 [ 3024.027941][ C0] ip_finish_output2+0x2459/0x2930 [ 3024.033064][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 3024.038794][ C0] ? nf_ct_deliver_cached_events+0x52f/0x7e0 [ 3024.044783][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3024.050043][ C0] __ip_finish_output+0xeb5/0xfd0 [ 3024.055090][ C0] ip_finish_output+0x14b/0x4b0 [ 3024.059960][ C0] ip_output+0x5f2/0x6e0 [ 3024.064241][ C0] ? ip_mc_finish_output+0x780/0x780 [ 3024.069534][ C0] ? ip_finish_output+0x4b0/0x4b0 [ 3024.074569][ C0] __ip_queue_xmit+0x1eac/0x23c0 [ 3024.079520][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3024.085343][ C0] ? ipv4_default_advmss+0x709/0x7d0 [ 3024.090643][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3024.095867][ C0] ip_queue_xmit+0xcc/0xf0 [ 3024.100299][ C0] ? tcp_v4_fill_cb+0x5e0/0x5e0 [ 3024.105165][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 3024.110373][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 3024.115959][ C0] tcp_connect+0x153f/0x3bb0 [ 3024.120559][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 3024.125856][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3024.131675][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 3024.137581][ C0] ? prandom_u32+0x1c1/0x280 [ 3024.142189][ C0] tcp_v4_connect+0x2532/0x26c0 [ 3024.147072][ C0] ? tcp_twsk_unique+0xe20/0xe20 [ 3024.152019][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 3024.157499][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3024.162750][ C0] inet_stream_connect+0x101/0x180 [ 3024.167901][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 3024.173546][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 3024.179199][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3024.184412][ C0] ? rds_tcp_state_change+0x400/0x400 [ 3024.189793][ C0] rds_connect_worker+0x36b/0x550 [ 3024.194837][ C0] ? rds_addr_cmp+0x290/0x290 [ 3024.199523][ C0] process_one_work+0x1688/0x2140 [ 3024.204574][ C0] worker_thread+0x10bc/0x2730 [ 3024.209349][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3024.214576][ C0] kthread+0x551/0x590 [ 3024.218658][ C0] ? process_one_work+0x2140/0x2140 [ 3024.223867][ C0] ? kthread_blkcg+0x110/0x110 [ 3024.228642][ C0] ret_from_fork+0x1f/0x30 [ 3024.233064][ C0] Uninit was stored to memory at: [ 3024.238099][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3024.243817][ C0] __msan_chain_origin+0x50/0x90 [ 3024.248752][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3024.253779][ C0] tcp_v4_conn_request+0x201/0x290 [ 3024.258890][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3024.263915][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3024.269295][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3024.273886][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3024.278497][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3024.283954][ C0] ip_local_deliver+0x727/0x8d0 [ 3024.288806][ C0] ip_rcv+0x795/0x810 [ 3024.292790][ C0] __netif_receive_skb+0x265/0x670 [ 3024.297906][ C0] process_backlog+0x50d/0xba0 [ 3024.302672][ C0] napi_poll+0x43b/0xfd0 [ 3024.306917][ C0] net_rx_action+0x35c/0xd40 [ 3024.311555][ C0] __do_softirq+0x2ea/0x7f5 [ 3024.316047][ C0] [ 3024.318369][ C0] Uninit was stored to memory at: [ 3024.323403][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3024.329124][ C0] __msan_chain_origin+0x50/0x90 [ 3024.334061][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3024.339523][ C0] tcp_conn_request+0x3046/0x4c30 [ 3024.344556][ C0] tcp_v4_conn_request+0x201/0x290 [ 3024.349673][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3024.354703][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3024.360083][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3024.364675][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3024.369184][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3024.374644][ C0] ip_local_deliver+0x727/0x8d0 [ 3024.379496][ C0] ip_rcv+0x795/0x810 [ 3024.383483][ C0] __netif_receive_skb+0x265/0x670 [ 3024.388629][ C0] process_backlog+0x50d/0xba0 [ 3024.393486][ C0] napi_poll+0x43b/0xfd0 [ 3024.397733][ C0] net_rx_action+0x35c/0xd40 [ 3024.402328][ C0] __do_softirq+0x2ea/0x7f5 [ 3024.406831][ C0] [ 3024.409153][ C0] Uninit was stored to memory at: [ 3024.414186][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3024.419911][ C0] __msan_chain_origin+0x50/0x90 [ 3024.424853][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3024.429911][ C0] tcp_v4_conn_request+0x201/0x290 [ 3024.435058][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3024.440090][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3024.445496][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3024.450092][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3024.454600][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3024.460063][ C0] ip_local_deliver+0x727/0x8d0 [ 3024.464914][ C0] ip_rcv+0x795/0x810 [ 3024.468903][ C0] __netif_receive_skb+0x265/0x670 [ 3024.474023][ C0] process_backlog+0x50d/0xba0 [ 3024.478788][ C0] napi_poll+0x43b/0xfd0 [ 3024.483039][ C0] net_rx_action+0x35c/0xd40 [ 3024.487634][ C0] __do_softirq+0x2ea/0x7f5 [ 3024.492125][ C0] [ 3024.494450][ C0] Uninit was stored to memory at: [ 3024.499482][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3024.505207][ C0] __msan_chain_origin+0x50/0x90 [ 3024.510149][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3024.515437][ C0] tcp_conn_request+0x3046/0x4c30 [ 3024.520468][ C0] tcp_v4_conn_request+0x201/0x290 [ 3024.525588][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3024.530617][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3024.535993][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3024.540591][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3024.545097][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3024.550563][ C0] ip_local_deliver+0x727/0x8d0 [ 3024.555416][ C0] ip_rcv+0x795/0x810 [ 3024.559410][ C0] __netif_receive_skb+0x265/0x670 [ 3024.564535][ C0] process_backlog+0x50d/0xba0 [ 3024.569307][ C0] napi_poll+0x43b/0xfd0 [ 3024.573552][ C0] net_rx_action+0x35c/0xd40 [ 3024.578148][ C0] __do_softirq+0x2ea/0x7f5 [ 3024.582662][ C0] [ 3024.584983][ C0] Uninit was stored to memory at: [ 3024.590014][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3024.595738][ C0] __msan_chain_origin+0x50/0x90 [ 3024.600681][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3024.605717][ C0] tcp_v4_conn_request+0x201/0x290 [ 3024.610835][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3024.615875][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3024.621296][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3024.625983][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3024.630492][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3024.635938][ C0] ip_local_deliver+0x727/0x8d0 [ 3024.640796][ C0] ip_rcv+0x795/0x810 [ 3024.644774][ C0] __netif_receive_skb+0x265/0x670 [ 3024.649883][ C0] process_backlog+0x50d/0xba0 [ 3024.654637][ C0] napi_poll+0x43b/0xfd0 [ 3024.658886][ C0] net_rx_action+0x35c/0xd40 [ 3024.663467][ C0] __do_softirq+0x2ea/0x7f5 [ 3024.667947][ C0] [ 3024.670278][ C0] Uninit was stored to memory at: [ 3024.675343][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3024.681069][ C0] __msan_chain_origin+0x50/0x90 [ 3024.685998][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3024.691275][ C0] tcp_conn_request+0x3046/0x4c30 [ 3024.696289][ C0] tcp_v4_conn_request+0x201/0x290 [ 3024.701495][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3024.706510][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3024.711868][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3024.716463][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3024.720958][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3024.726405][ C0] ip_local_deliver+0x727/0x8d0 [ 3024.731326][ C0] ip_rcv+0x795/0x810 [ 3024.735415][ C0] __netif_receive_skb+0x265/0x670 [ 3024.740527][ C0] process_backlog+0x50d/0xba0 [ 3024.745305][ C0] napi_poll+0x43b/0xfd0 [ 3024.749544][ C0] net_rx_action+0x35c/0xd40 [ 3024.754152][ C0] __do_softirq+0x2ea/0x7f5 [ 3024.758635][ C0] [ 3024.760947][ C0] Uninit was stored to memory at: [ 3024.765966][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3024.771673][ C0] __msan_chain_origin+0x50/0x90 [ 3024.776600][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3024.781616][ C0] tcp_v4_conn_request+0x201/0x290 [ 3024.786719][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3024.791731][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3024.797114][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3024.801694][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3024.806188][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3024.811632][ C0] ip_local_deliver+0x727/0x8d0 [ 3024.816470][ C0] ip_rcv+0x795/0x810 [ 3024.820443][ C0] __netif_receive_skb+0x265/0x670 [ 3024.825555][ C0] process_backlog+0x50d/0xba0 [ 3024.830312][ C0] napi_poll+0x43b/0xfd0 [ 3024.834551][ C0] net_rx_action+0x35c/0xd40 [ 3024.839128][ C0] __do_softirq+0x2ea/0x7f5 [ 3024.843609][ C0] [ 3024.845925][ C0] Uninit was created at: [ 3024.850162][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 3024.855784][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 3024.860543][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 3024.865991][ C0] alloc_pages_current+0x685/0xb50 [ 3024.871095][ C0] alloc_slab_page+0x11c/0x1240 [ 3024.875939][ C0] new_slab+0x2bf/0x10c0 [ 3024.880174][ C0] ___slab_alloc+0xcd3/0x18a0 [ 3024.884839][ C0] kmem_cache_alloc+0xb70/0xc50 [ 3024.889679][ C0] inet_reqsk_alloc+0xaf/0x910 [ 3024.894431][ C0] tcp_conn_request+0x8dc/0x4c30 [ 3024.899357][ C0] tcp_v4_conn_request+0x201/0x290 [ 3024.904462][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3024.909822][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3024.914403][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3024.918895][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3024.924340][ C0] ip_local_deliver+0x727/0x8d0 [ 3024.929177][ C0] ip_sublist_rcv+0x1389/0x1540 [ 3024.934014][ C0] ip_list_rcv+0x904/0x970 [ 3024.938419][ C0] __netif_receive_skb_list_core+0xeab/0x12b0 [ 3024.944475][ C0] __netif_receive_skb_list+0x818/0x990 [ 3024.950011][ C0] netif_receive_skb_list_internal+0xdfa/0xe20 [ 3024.956153][ C0] napi_complete_done+0x552/0xf90 [ 3024.961167][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 3024.966527][ C0] virtnet_poll+0x170f/0x1d10 [ 3024.971207][ C0] napi_poll+0x43b/0xfd0 [ 3024.975442][ C0] net_rx_action+0x35c/0xd40 [ 3024.980039][ C0] __do_softirq+0x2ea/0x7f5 09:18:09 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e704095f9f95274b0a0002840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 09:18:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) 09:18:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f7", 0x300}], 0x1) 09:18:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f7", 0x300}], 0x1) 09:18:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000014000380080002400000000008000140000000005c000000180a01010000000000000000010000000900020073797a32000000000900010073797a3000000000040003802c0003801400010076"], 0xe4}}, 0x0) [ 3025.033993][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.051911][T16790] gspca_stk1135: reg_w 0x350 err -71 [ 3025.059466][T16790] gspca_stk1135: serial bus timeout: status=0x00 [ 3025.065934][T16790] gspca_stk1135: Sensor write failed [ 3025.071372][T16790] gspca_stk1135: serial bus timeout: status=0x00 [ 3025.077850][T16790] gspca_stk1135: Sensor write failed [ 3025.083366][T16790] gspca_stk1135: serial bus timeout: status=0x00 [ 3025.089836][T16790] gspca_stk1135: Sensor read failed [ 3025.095247][T16790] gspca_stk1135: serial bus timeout: status=0x00 [ 3025.101609][T16790] gspca_stk1135: Sensor read failed [ 3025.106951][T16790] gspca_stk1135: Detected sensor type unknown (0x0) [ 3025.113761][T16790] gspca_stk1135: serial bus timeout: status=0x00 [ 3025.120131][T16790] gspca_stk1135: Sensor read failed [ 3025.125721][T16790] gspca_stk1135: serial bus timeout: status=0x00 [ 3025.132096][T16790] gspca_stk1135: Sensor read failed [ 3025.137541][T16790] gspca_stk1135: serial bus timeout: status=0x00 [ 3025.144018][T16790] gspca_stk1135: Sensor write failed [ 3025.149550][T16790] gspca_stk1135: serial bus timeout: status=0x00 [ 3025.156035][T16790] gspca_stk1135: Sensor write failed [ 3025.161620][T16790] stk1135: probe of 4-1:0.0 failed with error -71 [ 3025.214364][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.224040][T16790] usb 4-1: USB disconnect, device number 120 09:18:09 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="6301000036ee3808d30b55056a690000000109024600010000000009040000000e010000082402060202"], 0x0) [ 3025.397478][ T4331] usb 3-1: unable to read config index 0 descriptor/all [ 3025.404759][ T4331] usb 3-1: can't read configurations, error -71 [ 3025.524639][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:10 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) chmod(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_fuse_handle_req(r0, &(0x7f0000004340)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0}) 09:18:10 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e704095f9f95274b0a0002840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) [ 3026.087651][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f7", 0x300}], 0x1) [ 3026.303550][ T4331] usb 3-1: new high-speed USB device number 111 using dummy_hcd 09:18:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [0xc0000100, 0x0, 0x3, 0x2, 0xc001102c, 0x0, 0x7]}) [ 3026.563574][ T4331] usb 3-1: Using ep0 maxpacket: 8 [ 3026.704724][ T4331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3026.715829][ T4331] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 3026.725127][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:18:11 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e704095f9f95274b0a0002840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 09:18:11 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) chmod(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0}) [ 3026.925777][ T4331] usb 3-1: config 0 descriptor?? 09:18:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "80b54408eed5fa82", "48e9bcb0e3c3ea7d149a2e8d4809a237", "2ba94f5b", "6db72c00d91175c5"}, 0x28) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)='M', 0x1}], 0x1}, 0x0) 09:18:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f7", 0x300}], 0x1) [ 3027.124629][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:11 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x18, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0x1, "a36b4f44904a"}]}}}}}}, 0x0) [ 3027.236779][T16687] usb 3-1: USB disconnect, device number 111 09:18:12 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e704095f9f95274b0a0002840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 09:18:12 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) chmod(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0}) 09:18:12 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="6301000036ee3808d30b55056a690000000109024600010000000009040000000e010000082402060202"], 0x0) 09:18:12 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x18, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0x1, "a36b4f44904a"}]}}}}}}, 0x0) 09:18:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) [ 3028.166165][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:12 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000000480)="af28022c0da51593b2768199235337a8e6a1ffab0c0416917aebcf5a1d39f9a10d2143de170363a205d2110466f0c2cab2f3d43668d170a92cbe20824c9a6881d59e422987152a17629e0f793d0f0afccc82bfefa3a0222b62ec8c3a9ab9322165fcce2e86c483ef73ea154e48a33b72b0074b0105f2193d17408345ac2cb17d7f49c819fd4c574885dc720c3d9f95015054e1fb79010fbf615f2efe29fff81c6c5c78c2435d8763be6060446d3b247f9af037e2", 0xb4) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) [ 3028.244360][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:13 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) chmod(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0}) 09:18:13 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x18, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0x1, "a36b4f44904a"}]}}}}}}, 0x0) [ 3028.903683][ T9024] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3029.143191][ T9024] usb 3-1: Using ep0 maxpacket: 8 09:18:13 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000000480)="af28022c0da51593b2768199235337a8e6a1ffab0c0416917aebcf5a1d39f9a10d2143de170363a205d2110466f0c2cab2f3d43668d170a92cbe20824c9a6881d59e422987152a17629e0f793d0f0afccc82bfefa3a0222b62ec8c3a9ab9322165fcce2e86c483ef73ea154e48a33b72b0074b0105f2193d17408345ac2cb17d7f49c819fd4c574885dc720c3d9f95015054e1fb79010fbf615f2efe29fff81c6c5c78c2435d8763be6060446d3b247f9af037e2", 0xb4) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) [ 3029.205339][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3029.264490][ T9024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3029.274924][ T9024] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 3029.284289][ T9024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3029.405063][ T9024] usb 3-1: config 0 descriptor?? 09:18:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "80b54408eed5fa82", "48e9bcb0e3c3ea7d149a2e8d4809a237", "2ba94f5b", "6db72c00d91175c5"}, 0x28) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)='M', 0x1}], 0x1}, 0x0) 09:18:14 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 09:18:14 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x18, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0x1, "a36b4f44904a"}]}}}}}}, 0x0) [ 3029.673407][ T9024] usb 3-1: USB disconnect, device number 112 09:18:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 09:18:14 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000000480)="af28022c0da51593b2768199235337a8e6a1ffab0c0416917aebcf5a1d39f9a10d2143de170363a205d2110466f0c2cab2f3d43668d170a92cbe20824c9a6881d59e422987152a17629e0f793d0f0afccc82bfefa3a0222b62ec8c3a9ab9322165fcce2e86c483ef73ea154e48a33b72b0074b0105f2193d17408345ac2cb17d7f49c819fd4c574885dc720c3d9f95015054e1fb79010fbf615f2efe29fff81c6c5c78c2435d8763be6060446d3b247f9af037e2", 0xb4) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) [ 3030.246942][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:15 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="6301000036ee3808d30b55056a690000000109024600010000000009040000000e010000082402060202"], 0x0) 09:18:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 09:18:15 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 09:18:15 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000000480)="af28022c0da51593b2768199235337a8e6a1ffab0c0416917aebcf5a1d39f9a10d2143de170363a205d2110466f0c2cab2f3d43668d170a92cbe20824c9a6881d59e422987152a17629e0f793d0f0afccc82bfefa3a0222b62ec8c3a9ab9322165fcce2e86c483ef73ea154e48a33b72b0074b0105f2193d17408345ac2cb17d7f49c819fd4c574885dc720c3d9f95015054e1fb79010fbf615f2efe29fff81c6c5c78c2435d8763be6060446d3b247f9af037e2", 0xb4) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) [ 3031.263596][T16699] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3031.294870][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3031.314818][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) [ 3031.504110][T16699] usb 3-1: Using ep0 maxpacket: 8 [ 3031.623423][T16699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3031.634100][T16699] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 3031.643484][T16699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3031.675351][T16699] usb 3-1: config 0 descriptor?? 09:18:16 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) [ 3031.958540][ T4331] usb 3-1: USB disconnect, device number 113 09:18:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "80b54408eed5fa82", "48e9bcb0e3c3ea7d149a2e8d4809a237", "2ba94f5b", "6db72c00d91175c5"}, 0x28) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)='M', 0x1}], 0x1}, 0x0) [ 3032.325020][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:17 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 09:18:17 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 09:18:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) [ 3032.991006][ T4846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:18:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a85f668f0c017030"}) r2 = syz_open_pts(r0, 0x141800) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 3033.364906][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) [ 3033.723009][ T4846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:18:18 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 09:18:18 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 09:18:18 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x3ff, 0x43, 0x2, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x1}}) open(&(0x7f0000000080)='./bus\x00', 0x10d002, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) [ 3034.327984][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3034.404359][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3034.704295][ T4874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:18:19 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[]}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) [ 3035.151401][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:20 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3035.447043][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:20 executing program 4: pipe(&(0x7f0000000140)) r0 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_script(r0, 0x0, 0x2) 09:18:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "80b54408eed5fa82", "48e9bcb0e3c3ea7d149a2e8d4809a237", "2ba94f5b", "6db72c00d91175c5"}, 0x28) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)='M', 0x1}], 0x1}, 0x0) 09:18:20 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[]}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) 09:18:20 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) [ 3035.976818][ T4898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:18:20 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 09:18:21 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[]}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) 09:18:21 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3036.491492][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:21 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') [ 3036.852032][ T4917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:18:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 09:18:21 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[]}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) [ 3037.365807][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:22 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) [ 3037.524297][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 09:18:22 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 09:18:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 09:18:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 09:18:22 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 09:18:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x1000}, 0xc) [ 3038.566371][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 09:18:23 executing program 1: unshare(0x2a000400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 09:18:23 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 09:18:23 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 09:18:23 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 09:18:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) [ 3039.607238][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:24 executing program 1: unshare(0x2a000400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 09:18:24 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 09:18:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x80}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:18:24 executing program 1: unshare(0x2a000400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) [ 3040.403356][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3040.646198][T16687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:25 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x1000}, 0xc) 09:18:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x44}}, 0x0) 09:18:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x80}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:18:25 executing program 1: unshare(0x2a000400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 09:18:25 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014d1c48f00000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000000)="7b87ee3b", 0x4}], 0x2) [ 3041.215319][ T4997] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 09:18:25 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x44}}, 0x0) [ 3041.523597][ T3811] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 09:18:26 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) [ 3041.599004][ T3811] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3041.705455][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3041.718174][ T9024] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 3041.770020][ T9024] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz0] on syz1 09:18:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x80}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 3041.938288][ T5024] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 09:18:26 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014d1c48f00000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000000)="7b87ee3b", 0x4}], 0x2) 09:18:26 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:26 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) [ 3042.524398][T16790] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 3042.601117][T16790] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3042.723286][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x1000}, 0xc) 09:18:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x44}}, 0x0) 09:18:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x80}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:18:27 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:27 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014d1c48f00000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000000)="7b87ee3b", 0x4}], 0x2) 09:18:27 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) [ 3043.139791][ T5052] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 09:18:28 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014d1c48f00000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000000)="7b87ee3b", 0x4}], 0x2) [ 3043.482499][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:28 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:28 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x44}}, 0x0) 09:18:28 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 3043.765329][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3043.869021][T16790] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 3043.918696][T16790] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3044.068879][ T5077] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 09:18:28 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x1000}, 0xc) 09:18:29 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:29 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 09:18:29 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 09:18:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newlink={0x38, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 09:18:29 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) [ 3044.774603][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3044.842777][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:29 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r1) 09:18:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newlink={0x38, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 09:18:29 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 09:18:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)="d9", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) 09:18:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newlink={0x38, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 09:18:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x32, &(0x7f00000001c0)="c4c691019919da078a0098d3e0c393b040f762910000000000000022addee07bee0e6333b5cacd893169b618322ff6602022"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x3d) [ 3045.923483][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3046.586137][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:31 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x10, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100), 0xa}], 0x492492492492642, 0x0) 09:18:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)="d9", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) 09:18:31 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 09:18:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newlink={0x38, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 09:18:31 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 09:18:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffff, 0x0) [ 3046.962273][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:31 executing program 3: r0 = socket$packet(0x11, 0x2000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x228, 0xfffffffffffffffe}, 0x10) 09:18:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)="d9", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) 09:18:31 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x12}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x2, 0x0) 09:18:31 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x10, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100), 0xa}], 0x492492492492642, 0x0) 09:18:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)="d9", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) 09:18:32 executing program 3: r0 = socket$packet(0x11, 0x2000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x228, 0xfffffffffffffffe}, 0x10) 09:18:32 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 09:18:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000800)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 3048.008827][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x10, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100), 0xa}], 0x492492492492642, 0x0) 09:18:32 executing program 3: r0 = socket$packet(0x11, 0x2000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x228, 0xfffffffffffffffe}, 0x10) 09:18:32 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002740)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5441, 0x0) 09:18:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffff, 0x0) 09:18:33 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000480000000000000095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd917487960717142fa9ea4318123341cf9d90a0e4f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0cd2b6d357b8580218ce74005d2a1bcf9436e192e23fd2f73902ebcfcf49822775985bf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465bc52f49129b9b6150e320c9901de2ebb9dd6968698e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0037c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c2870f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e51723257c95335255f22bd8b325d9b76e57f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72706157791c3d2a2861eb8d354c4e556b613107c331c46c75852115236c2a8682bf7ecbd53f950ef4709ec01e230d23cc71d32c22817eab78ff53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d485000000000b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a09c502f9a65b4dfc66fa748cee4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a43094d8e65a9d7cd6dfc06b02e69d384146056d125cfa788237874dd913d033277e88d10acd06864eac44c42dace34bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa24dba1c25be27940b4c4f63483026b5e04d44705b76ef29241adab0dd7d68bf975e02069f6f24e1e1bc976d965ddabb01aff9f27dc1d9a4a35588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebd29413afc9d8a5edd7a19ca6a57b5a8fa7e1e6c2f2a287c5278a218d9e173ec6900a13db5cfef409eb1d39c48cfdc80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c900000000ebfd0ca88368ee6ce139e8b5822408004c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41f47e0fffeac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a5628995b1531bd20360d33d8f9ffffff5f912a93e34bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f095314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba9d10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec11167c10680c580dc31b0963ff983d071f8158617d4956ad4b2c80653ce09148e8dfea9d03a61bbd2bb5a3518507a3cd0fd7c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503b49c5b2d16877299acefc0fb5bc1422c3d275d988eedebcf242b780a687c9acae2a5a71cf9b2fa90b2905906e611be56e9ebe20cf69ef93c050eb304ab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c056fe8ecf90c94d7ecd8e8137b14f849d0b2924f983a5cc69ba36480aaebc26d8f01b64ff065e28a862b56a010efd82b2025684ecc0b06fb1e9986d0e923b43252e0e0f8d86eb84243fd0bbfe300"/1585], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="a2c134604383a0af2baeb0460800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 09:18:33 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 09:18:33 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x10, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100), 0xa}], 0x492492492492642, 0x0) 09:18:33 executing program 3: r0 = socket$packet(0x11, 0x2000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x228, 0xfffffffffffffffe}, 0x10) 09:18:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) [ 3049.044772][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:33 executing program 1: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x4}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000580)={0x8, &(0x7f0000000540)=[0x5, 0x4, 0x96, 0x0, 0x31, 0x0, 0x0, 0x6]}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x20000010) 09:18:34 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000300)="04000000010219", 0x7}, {&(0x7f0000000180)="5ccab64877ac7f", 0x7}], 0x2) 09:18:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) [ 3049.615197][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a001600ac14142603000e1208001e000000812f0300040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) [ 3049.732700][ T5182] input: syz0 as /devices/virtual/input/input206 [ 3049.827657][ T5187] input: syz0 as /devices/virtual/input/input207 [ 3050.085597][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3050.124358][ T5205] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. 09:18:34 executing program 1: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x4}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000580)={0x8, &(0x7f0000000540)=[0x5, 0x4, 0x96, 0x0, 0x31, 0x0, 0x0, 0x6]}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x20000010) 09:18:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) [ 3050.712914][ T5208] input: syz0 as /devices/virtual/input/input208 09:18:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffff, 0x0) 09:18:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140e, 0x209, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x3, 0x8}]}, 0x18}}, 0x0) 09:18:35 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000300)="04000000010219", 0x7}, {&(0x7f0000000180)="5ccab64877ac7f", 0x7}], 0x2) 09:18:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a001600ac14142603000e1208001e000000812f0300040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 09:18:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 09:18:35 executing program 1: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x4}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000580)={0x8, &(0x7f0000000540)=[0x5, 0x4, 0x96, 0x0, 0x31, 0x0, 0x0, 0x6]}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x20000010) [ 3051.075184][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3051.098363][ T5221] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3051.172222][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:35 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000300)="04000000010219", 0x7}, {&(0x7f0000000180)="5ccab64877ac7f", 0x7}], 0x2) 09:18:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a001600ac14142603000e1208001e000000812f0300040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 09:18:36 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140e, 0x209, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x3, 0x8}]}, 0x18}}, 0x0) [ 3051.578828][ T5226] input: syz0 as /devices/virtual/input/input209 09:18:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) [ 3051.789416][ T5237] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3051.821647][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:18:36 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000300)="04000000010219", 0x7}, {&(0x7f0000000180)="5ccab64877ac7f", 0x7}], 0x2) 09:18:36 executing program 1: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd126560000000049d2e181baf9450000953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360127ec60cb274ea524347d37dcb84900da971f7ee096d74c92e34bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000002000d3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93980db1db00b419ce38d76109f7a4c37d64ca0cd80de1ba0c2974017ca4a8708f7a1f6885f986a1ad1fb11f8c2e7344000000000000"], 0xd3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x4}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000580)={0x8, &(0x7f0000000540)=[0x5, 0x4, 0x96, 0x0, 0x31, 0x0, 0x0, 0x6]}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x20000010) [ 3052.247205][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.449007][ T5249] input: syz0 as /devices/virtual/input/input210 [ 3052.650847][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffff, 0x0) 09:18:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140e, 0x209, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x3, 0x8}]}, 0x18}}, 0x0) 09:18:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a001600ac14142603000e1208001e000000812f0300040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 09:18:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) 09:18:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) 09:18:37 executing program 1: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x21c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) [ 3052.895544][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3052.925235][ T5259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.934267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.939551][ T5263] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3053.006057][ T5265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3053.228292][ T5265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3053.284065][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140e, 0x209, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x3, 0x8}]}, 0x18}}, 0x0) 09:18:37 executing program 1: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x21c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 09:18:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) 09:18:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) 09:18:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) [ 3053.791654][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3053.885654][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3053.894642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:38 executing program 1: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x21c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) [ 3054.322016][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.434121][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:39 executing program 1: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x21c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 09:18:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) getrusage(0x0, &(0x7f0000000080)) 09:18:39 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x20841, 0x0) write$rfkill(r0, &(0x7f0000000140), 0x8) 09:18:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) 09:18:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) 09:18:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) [ 3054.782968][ T5300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.792507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) 09:18:39 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000001c0)=[{'IMIX', @val={' \'', 'CD Capture Switch', '\' '}}, {'SYNTH', @val={' \'', 'Master', '\' '}}], 0x52) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 09:18:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000001680)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x2d}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x3, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}, 0x3a) 09:18:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) 09:18:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) [ 3055.452862][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3055.499107][ T5317] ALSA: mixer_oss: invalid OSS volume '' [ 3055.507247][ T5317] ALSA: mixer_oss: invalid OSS volume '' [ 3055.681773][T16790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3055.727433][ T5316] ALSA: mixer_oss: invalid OSS volume '' [ 3055.735161][ T5316] ALSA: mixer_oss: invalid OSS volume '' [ 3055.883295][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:40 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000001c0)=[{'IMIX', @val={' \'', 'CD Capture Switch', '\' '}}, {'SYNTH', @val={' \'', 'Master', '\' '}}], 0x52) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x102f) dup3(r0, r1, 0x0) [ 3056.389390][ T5342] ALSA: mixer_oss: invalid OSS volume '' [ 3056.397150][ T5342] ALSA: mixer_oss: invalid OSS volume '' 09:18:41 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000001c0)=[{'IMIX', @val={' \'', 'CD Capture Switch', '\' '}}, {'SYNTH', @val={' \'', 'Master', '\' '}}], 0x52) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 09:18:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) [ 3057.056702][ T5345] ALSA: mixer_oss: invalid OSS volume '' [ 3057.065157][ T5345] ALSA: mixer_oss: invalid OSS volume '' [ 3057.097227][ C1] not chained 310000 origins [ 3057.101851][ C1] CPU: 1 PID: 5266 Comm: kworker/u4:29 Not tainted 5.8.0-rc5-syzkaller #0 [ 3057.110340][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3057.120418][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 3057.126035][ C1] Call Trace: [ 3057.129308][ C1] [ 3057.132155][ C1] dump_stack+0x21c/0x280 [ 3057.136480][ C1] ? tcp_v4_do_rcv+0xbfc/0xff0 [ 3057.141242][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 3057.146953][ C1] ? do_softirq_own_stack+0x7c/0xa0 [ 3057.152143][ C1] ? __local_bh_enable_ip+0x184/0x1d0 [ 3057.157505][ C1] ? local_bh_enable+0x36/0x40 [ 3057.162258][ C1] ? ip_finish_output2+0x2459/0x2930 [ 3057.167534][ C1] ? __ip_finish_output+0xeb5/0xfd0 [ 3057.172718][ C1] ? ip_finish_output+0x14b/0x4b0 [ 3057.177731][ C1] ? ip_output+0x5f2/0x6e0 [ 3057.182155][ C1] ? __ip_queue_xmit+0x1eac/0x23c0 [ 3057.187255][ C1] ? ip_queue_xmit+0xcc/0xf0 [ 3057.191837][ C1] ? __tcp_transmit_skb+0x4b9e/0x5d70 [ 3057.197216][ C1] ? tcp_write_xmit+0x4f5b/0xe6a0 [ 3057.202248][ C1] ? __tcp_push_pending_frames+0x150/0x5c0 [ 3057.208043][ C1] ? tcp_send_fin+0x192a/0x1bc0 [ 3057.212886][ C1] ? tcp_shutdown+0x1f7/0x270 [ 3057.217574][ C1] ? inet_shutdown+0x44f/0x6d0 [ 3057.222332][ C1] ? kernel_sock_shutdown+0x98/0xc0 [ 3057.227525][ C1] ? rds_tcp_accept_one+0x1060/0x12c0 [ 3057.232889][ C1] ? rds_tcp_accept_worker+0x60/0x180 [ 3057.238251][ C1] ? process_one_work+0x1688/0x2140 [ 3057.243457][ C1] ? worker_thread+0x10bc/0x2730 [ 3057.248384][ C1] ? kthread+0x551/0x590 [ 3057.252619][ C1] ? ret_from_fork+0x1f/0x30 [ 3057.257215][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3057.263016][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3057.269075][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.274270][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3057.280077][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 3057.286227][ C1] ? __msan_get_context_state+0x9/0x20 [ 3057.291683][ C1] ? __module_get+0x19/0x210 [ 3057.296271][ C1] ? inet_twsk_alloc+0x7fd/0xbd0 [ 3057.301201][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.306390][ C1] __msan_chain_origin+0x50/0x90 [ 3057.311324][ C1] tcp_time_wait+0xbba/0x1150 [ 3057.316001][ C1] tcp_fin+0x23a/0x9f0 [ 3057.320067][ C1] tcp_data_queue+0x1e5c/0xb570 [ 3057.324921][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3057.330718][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 3057.336777][ C1] ? tcp_urg+0xb22/0x10c0 [ 3057.341114][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 3057.346564][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3057.352365][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 3057.358429][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.363629][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.368835][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 3057.373417][ C1] ? kmsan_set_origin_checked+0x20/0xf0 [ 3057.378960][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 3057.383458][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.388681][ C1] ? tcp_v4_rcv+0x1801/0x5c10 [ 3057.393352][ C1] ? tcp_filter+0xf0/0xf0 [ 3057.397693][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3057.403150][ C1] ip_local_deliver+0x727/0x8d0 [ 3057.407999][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 3057.413014][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3057.418638][ C1] ip_rcv+0x795/0x810 [ 3057.422619][ C1] ? ip_rcv_core+0x1490/0x1490 [ 3057.427375][ C1] __netif_receive_skb+0x265/0x670 [ 3057.432477][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 3057.438012][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 3057.443646][ C1] process_backlog+0x50d/0xba0 [ 3057.448406][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3057.454210][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3057.459484][ C1] napi_poll+0x43b/0xfd0 [ 3057.463724][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.468928][ C1] net_rx_action+0x35c/0xd40 [ 3057.473634][ C1] ? net_tx_action+0xdc0/0xdc0 [ 3057.478522][ C1] __do_softirq+0x2ea/0x7f5 [ 3057.483026][ C1] asm_call_on_stack+0xf/0x20 [ 3057.487686][ C1] [ 3057.490621][ C1] do_softirq_own_stack+0x7c/0xa0 [ 3057.495727][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 3057.500923][ C1] local_bh_enable+0x36/0x40 [ 3057.505522][ C1] ip_finish_output2+0x2459/0x2930 [ 3057.510639][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 3057.516358][ C1] ? nf_ct_deliver_cached_events+0x52f/0x7e0 [ 3057.522338][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.527544][ C1] __ip_finish_output+0xeb5/0xfd0 [ 3057.532575][ C1] ip_finish_output+0x14b/0x4b0 [ 3057.537426][ C1] ip_output+0x5f2/0x6e0 [ 3057.541672][ C1] ? ip_mc_finish_output+0x780/0x780 [ 3057.546958][ C1] ? ip_finish_output+0x4b0/0x4b0 [ 3057.551983][ C1] __ip_queue_xmit+0x1eac/0x23c0 [ 3057.556914][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.562125][ C1] ip_queue_xmit+0xcc/0xf0 [ 3057.566540][ C1] ? tcp_v6_send_response+0x2c20/0x2c20 [ 3057.572079][ C1] __tcp_transmit_skb+0x4b9e/0x5d70 [ 3057.577301][ C1] tcp_write_xmit+0x4f5b/0xe6a0 [ 3057.582200][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.587388][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.592579][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.597774][ C1] __tcp_push_pending_frames+0x150/0x5c0 [ 3057.603403][ C1] tcp_send_fin+0x192a/0x1bc0 [ 3057.608081][ C1] ? tcp_set_state+0x9ec/0xb40 [ 3057.612845][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.618044][ C1] tcp_shutdown+0x1f7/0x270 [ 3057.622540][ C1] ? tcp_set_state+0xb40/0xb40 [ 3057.627321][ C1] inet_shutdown+0x44f/0x6d0 [ 3057.631925][ C1] ? inet_recvmsg+0x6b0/0x6b0 [ 3057.637549][ C1] kernel_sock_shutdown+0x98/0xc0 [ 3057.642570][ C1] rds_tcp_accept_one+0x1060/0x12c0 [ 3057.647767][ C1] rds_tcp_accept_worker+0x60/0x180 [ 3057.652984][ C1] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 3057.658140][ C1] process_one_work+0x1688/0x2140 [ 3057.663195][ C1] worker_thread+0x10bc/0x2730 [ 3057.667966][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3057.673193][ C1] kthread+0x551/0x590 [ 3057.677259][ C1] ? process_one_work+0x2140/0x2140 [ 3057.682456][ C1] ? kthread_blkcg+0x110/0x110 [ 3057.687215][ C1] ret_from_fork+0x1f/0x30 [ 3057.691626][ C1] Uninit was stored to memory at: [ 3057.696667][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3057.702379][ C1] __msan_chain_origin+0x50/0x90 [ 3057.707326][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 3057.712518][ C1] tcp_timewait_state_process+0x1a64/0x1e30 [ 3057.718427][ C1] tcp_v4_rcv+0x2237/0x5c10 [ 3057.722924][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3057.728372][ C1] ip_local_deliver+0x727/0x8d0 [ 3057.733245][ C1] ip_rcv+0x795/0x810 [ 3057.737227][ C1] __netif_receive_skb+0x265/0x670 [ 3057.742349][ C1] process_backlog+0x50d/0xba0 [ 3057.747118][ C1] napi_poll+0x43b/0xfd0 [ 3057.751358][ C1] net_rx_action+0x35c/0xd40 [ 3057.755962][ C1] __do_softirq+0x2ea/0x7f5 [ 3057.760447][ C1] [ 3057.762761][ C1] Uninit was stored to memory at: [ 3057.767795][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3057.773504][ C1] __msan_chain_origin+0x50/0x90 [ 3057.778430][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 3057.783619][ C1] tcp_time_wait+0xf7b/0x1150 [ 3057.788286][ C1] tcp_rcv_state_process+0xf6e/0x45b0 [ 3057.793668][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 3057.798248][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 3057.802739][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3057.808184][ C1] ip_local_deliver+0x727/0x8d0 [ 3057.813023][ C1] ip_rcv+0x795/0x810 [ 3057.816994][ C1] __netif_receive_skb+0x265/0x670 [ 3057.822095][ C1] process_backlog+0x50d/0xba0 [ 3057.826845][ C1] napi_poll+0x43b/0xfd0 [ 3057.831091][ C1] net_rx_action+0x35c/0xd40 [ 3057.835667][ C1] __do_softirq+0x2ea/0x7f5 [ 3057.840148][ C1] [ 3057.842462][ C1] Uninit was stored to memory at: [ 3057.847473][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3057.853196][ C1] __msan_chain_origin+0x50/0x90 [ 3057.858124][ C1] tcp_time_wait+0xbba/0x1150 [ 3057.862818][ C1] tcp_rcv_state_process+0xf6e/0x45b0 [ 3057.868179][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 3057.872766][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 3057.877256][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3057.882705][ C1] ip_local_deliver+0x727/0x8d0 [ 3057.887543][ C1] ip_rcv+0x795/0x810 [ 3057.891531][ C1] __netif_receive_skb+0x265/0x670 [ 3057.896631][ C1] process_backlog+0x50d/0xba0 [ 3057.901384][ C1] napi_poll+0x43b/0xfd0 [ 3057.905616][ C1] net_rx_action+0x35c/0xd40 [ 3057.910195][ C1] __do_softirq+0x2ea/0x7f5 [ 3057.914683][ C1] [ 3057.916993][ C1] Uninit was stored to memory at: [ 3057.922006][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3057.927711][ C1] __msan_chain_origin+0x50/0x90 [ 3057.932636][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 3057.937389][ C1] tcp_time_wait+0xd9/0x1150 [ 3057.941969][ C1] tcp_rcv_state_process+0xf6e/0x45b0 [ 3057.947328][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 3057.951907][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 3057.956399][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3057.961845][ C1] ip_local_deliver+0x727/0x8d0 [ 3057.966681][ C1] ip_rcv+0x795/0x810 [ 3057.970654][ C1] __netif_receive_skb+0x265/0x670 [ 3057.975757][ C1] process_backlog+0x50d/0xba0 [ 3057.980512][ C1] napi_poll+0x43b/0xfd0 [ 3057.984744][ C1] net_rx_action+0x35c/0xd40 [ 3057.989325][ C1] __do_softirq+0x2ea/0x7f5 [ 3057.993806][ C1] [ 3057.996119][ C1] Uninit was stored to memory at: [ 3058.001133][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3058.006838][ C1] __msan_chain_origin+0x50/0x90 [ 3058.011764][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 3058.016950][ C1] tcp_time_wait+0xf7b/0x1150 [ 3058.021613][ C1] tcp_fin+0x23a/0x9f0 [ 3058.025789][ C1] tcp_data_queue+0x1e5c/0xb570 [ 3058.030626][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 3058.036089][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 3058.040667][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 3058.045164][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3058.050610][ C1] ip_local_deliver+0x727/0x8d0 [ 3058.055449][ C1] ip_rcv+0x795/0x810 [ 3058.059423][ C1] __netif_receive_skb+0x265/0x670 [ 3058.064543][ C1] process_backlog+0x50d/0xba0 [ 3058.069293][ C1] napi_poll+0x43b/0xfd0 [ 3058.073527][ C1] net_rx_action+0x35c/0xd40 [ 3058.078118][ C1] __do_softirq+0x2ea/0x7f5 [ 3058.082600][ C1] [ 3058.084926][ C1] Uninit was stored to memory at: [ 3058.089941][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3058.095648][ C1] __msan_chain_origin+0x50/0x90 [ 3058.100590][ C1] tcp_time_wait+0xbba/0x1150 [ 3058.105253][ C1] tcp_fin+0x23a/0x9f0 [ 3058.109309][ C1] tcp_data_queue+0x1e5c/0xb570 [ 3058.114148][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 3058.119599][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 3058.124177][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 3058.128668][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3058.134112][ C1] ip_local_deliver+0x727/0x8d0 [ 3058.138948][ C1] ip_rcv+0x795/0x810 [ 3058.142923][ C1] __netif_receive_skb+0x265/0x670 [ 3058.148021][ C1] process_backlog+0x50d/0xba0 [ 3058.152772][ C1] napi_poll+0x43b/0xfd0 [ 3058.157003][ C1] net_rx_action+0x35c/0xd40 [ 3058.161582][ C1] __do_softirq+0x2ea/0x7f5 [ 3058.166066][ C1] [ 3058.168377][ C1] Uninit was stored to memory at: [ 3058.173391][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3058.179098][ C1] __msan_chain_origin+0x50/0x90 [ 3058.184128][ C1] inet_twsk_alloc+0xaf3/0xbd0 [ 3058.188885][ C1] tcp_time_wait+0xd9/0x1150 [ 3058.193463][ C1] tcp_fin+0x23a/0x9f0 [ 3058.197519][ C1] tcp_data_queue+0x1e5c/0xb570 [ 3058.202360][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 3058.207807][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 3058.212386][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 3058.216890][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3058.222336][ C1] ip_local_deliver+0x727/0x8d0 [ 3058.227173][ C1] ip_rcv+0x795/0x810 [ 3058.231161][ C1] __netif_receive_skb+0x265/0x670 [ 3058.236260][ C1] process_backlog+0x50d/0xba0 [ 3058.241035][ C1] napi_poll+0x43b/0xfd0 [ 3058.245267][ C1] net_rx_action+0x35c/0xd40 [ 3058.249846][ C1] __do_softirq+0x2ea/0x7f5 [ 3058.254330][ C1] [ 3058.256640][ C1] Uninit was created at: [ 3058.260877][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 3058.266496][ C1] kmsan_alloc_page+0xc5/0x1a0 [ 3058.271252][ C1] __alloc_pages_nodemask+0xdf0/0x1030 [ 3058.276714][ C1] alloc_pages_current+0x685/0xb50 [ 3058.281813][ C1] alloc_slab_page+0x11c/0x1240 [ 3058.286652][ C1] new_slab+0x2bf/0x10c0 [ 3058.290989][ C1] ___slab_alloc+0xcd3/0x18a0 [ 3058.295658][ C1] kmem_cache_alloc+0xb70/0xc50 [ 3058.300496][ C1] inet_twsk_alloc+0x154/0xbd0 [ 3058.305248][ C1] tcp_time_wait+0xd9/0x1150 [ 3058.309827][ C1] tcp_fin+0x23a/0x9f0 [ 3058.313886][ C1] tcp_data_queue+0x1e5c/0xb570 [ 3058.318724][ C1] tcp_rcv_state_process+0x2e24/0x45b0 [ 3058.324172][ C1] tcp_v4_do_rcv+0xbfc/0xff0 [ 3058.328835][ C1] tcp_v4_rcv+0x57d0/0x5c10 [ 3058.333329][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3058.338774][ C1] ip_local_deliver+0x727/0x8d0 [ 3058.343619][ C1] ip_rcv+0x795/0x810 [ 3058.347603][ C1] __netif_receive_skb+0x265/0x670 [ 3058.352707][ C1] process_backlog+0x50d/0xba0 [ 3058.357476][ C1] napi_poll+0x43b/0xfd0 [ 3058.361710][ C1] net_rx_action+0x35c/0xd40 [ 3058.366287][ C1] __do_softirq+0x2ea/0x7f5 [ 3058.370928][ T5326] __nla_validate_parse: 2 callbacks suppressed [ 3058.370964][ T5326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3058.418669][T30066] net_ratelimit: 2 callbacks suppressed [ 3058.418701][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x470, 0x0, 0x324, 0x0, 0x324, 0x154, 0x410, 0x410, 0x410, 0x410, 0x410, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "c348e953a284910fe4adada6004cc8fe5a92a11ee09f4259d45108f1627d"}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], '\x00', 'nr0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:auditd_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xec}, @common=@unspec=@IDLETIMER={0x44, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x4cc) [ 3058.733864][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:43 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000001c0)=[{'IMIX', @val={' \'', 'CD Capture Switch', '\' '}}, {'SYNTH', @val={' \'', 'Master', '\' '}}], 0x52) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 09:18:43 executing program 3: mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000009000/0x4000)=nil, 0x4000, 0xa) 09:18:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x2, 'vlan0\x00'}]}]}]}], {0x14}}, 0x84}}, 0x0) [ 3059.196587][ T5358] ALSA: mixer_oss: invalid OSS volume '' [ 3059.204331][ T5358] ALSA: mixer_oss: invalid OSS volume '' 09:18:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x470, 0x0, 0x324, 0x0, 0x324, 0x154, 0x410, 0x410, 0x410, 0x410, 0x410, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "c348e953a284910fe4adada6004cc8fe5a92a11ee09f4259d45108f1627d"}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], '\x00', 'nr0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:auditd_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xec}, @common=@unspec=@IDLETIMER={0x44, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x4cc) [ 3059.444532][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:44 executing program 3: mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000009000/0x4000)=nil, 0x4000, 0xa) [ 3060.487815][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000001680)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x2d}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x3, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}, 0x3a) 09:18:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:18:46 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) 09:18:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x470, 0x0, 0x324, 0x0, 0x324, 0x154, 0x410, 0x410, 0x410, 0x410, 0x410, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "c348e953a284910fe4adada6004cc8fe5a92a11ee09f4259d45108f1627d"}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], '\x00', 'nr0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:auditd_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xec}, @common=@unspec=@IDLETIMER={0x44, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x4cc) 09:18:46 executing program 3: mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000009000/0x4000)=nil, 0x4000, 0xa) [ 3061.529139][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3061.768753][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:18:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x470, 0x0, 0x324, 0x0, 0x324, 0x154, 0x410, 0x410, 0x410, 0x410, 0x410, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "c348e953a284910fe4adada6004cc8fe5a92a11ee09f4259d45108f1627d"}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], '\x00', 'nr0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:auditd_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xec}, @common=@unspec=@IDLETIMER={0x44, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x4cc) 09:18:46 executing program 3: mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000009000/0x4000)=nil, 0x4000, 0xa) [ 3062.563927][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000001680)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x2d}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x3, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}, 0x3a) 09:18:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:18:47 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) 09:18:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) [ 3063.603342][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:48 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) 09:18:48 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x24}], 0xb}, 0x0) [ 3064.389314][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3064.645522][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3064.801992][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000001680)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x2d}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x3, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}, 0x3a) 09:18:49 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x24}], 0xb}, 0x0) 09:18:49 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) 09:18:50 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x24}], 0xb}, 0x0) [ 3065.683461][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:50 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x24}], 0xb}, 0x0) 09:18:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1c0000004a009b8814e5f407000904000a00"/28, 0x1c) [ 3066.722574][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 09:18:51 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3067.336767][ C1] sd 0:0:1:0: [sg0] tag#6148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3067.347534][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB: Test Unit Ready [ 3067.354345][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.364270][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.374135][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.384009][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.393919][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.394049][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.394183][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.394311][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:18:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x750, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, {0x2, 0x0, @multicast1}, 0x84, 0x0, 0x2, 0x46a, 0x812}) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x3965f66704ca0a02, 0x84) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) dup2(r4, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x20, @empty, 0x2}}, 0x7, 0x1, 0x6, 0x0, 0x1, 0xff, 0xa3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) r6 = socket(0x15, 0x80005, 0x7ff) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000100)={r9, 0x0, 0x30}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r9, 0x7fffffff, 0x1, 0x10001}, &(0x7f0000000240)=0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x4a, {0x2, 0x4e24, @empty}, 'lo\x00'}) 09:18:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1c0000004a009b8814e5f407000904000a00"/28, 0x1c) 09:18:52 executing program 5: unshare(0x2a000400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:18:52 executing program 2: keyctl$set_reqkey_keyring(0x4, 0xfffffffc) [ 3067.394440][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.394571][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.394698][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.394826][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3067.394946][ C1] sd 0:0:1:0: [sg0] tag#6148 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3067.438142][ T28] audit: type=1800 audit(1600161531.969:178): pid=5513 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15685 res=0 09:18:53 executing program 2: keyctl$set_reqkey_keyring(0x4, 0xfffffffc) 09:18:53 executing program 5: unshare(0x2a000400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3067.806312][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3067.844473][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1c0000004a009b8814e5f407000904000a00"/28, 0x1c) [ 3068.176705][ C1] sd 0:0:1:0: [sg0] tag#6161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 09:18:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009f4ff80000000002c0000000000000800110003000000", 0x1f4) [ 3068.176831][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB: Test Unit Ready [ 3068.176962][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.177089][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.177217][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.177345][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.177494][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.177622][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:18:53 executing program 5: unshare(0x2a000400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3068.177750][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.177879][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.178006][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.178132][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.178260][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.178387][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3068.178514][ C1] sd 0:0:1:0: [sg0] tag#6161 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3068.214363][ T28] audit: type=1800 audit(1600161532.749:179): pid=5525 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15804 res=0 [ 3068.885921][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:54 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 09:18:54 executing program 2: keyctl$set_reqkey_keyring(0x4, 0xfffffffc) [ 3069.923227][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1c0000004a009b8814e5f407000904000a00"/28, 0x1c) 09:18:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009f4ff80000000002c0000000000000800110003000000", 0x1f4) 09:18:54 executing program 5: unshare(0x2a000400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:18:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 3070.434521][ C1] sd 0:0:1:0: [sg0] tag#6162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3070.445197][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB: Test Unit Ready [ 3070.451978][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.461844][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.471706][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.481630][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.491511][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.501372][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.511233][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.521094][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:18:55 executing program 2: keyctl$set_reqkey_keyring(0x4, 0xfffffffc) [ 3070.531071][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.541014][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.550880][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.560725][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3070.570578][ C1] sd 0:0:1:0: [sg0] tag#6162 CDB[c0]: 00 00 00 00 00 00 00 00 09:18:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009f4ff80000000002c0000000000000800110003000000", 0x1f4) 09:18:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 09:18:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 3070.880966][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009f4ff80000000002c0000000000000800110003000000", 0x1f4) [ 3071.061538][ T28] audit: type=1800 audit(1600161535.599:180): pid=5570 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15694 res=0 [ 3071.241540][ C1] sd 0:0:1:0: [sg0] tag#6163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3071.252242][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB: Test Unit Ready [ 3071.258891][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.268820][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.278751][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.288639][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.298514][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.308384][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.318255][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.328114][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.337970][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.347838][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.357698][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.367574][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.377518][ C1] sd 0:0:1:0: [sg0] tag#6163 CDB[c0]: 00 00 00 00 00 00 00 00 09:18:55 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x200002}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r2) [ 3071.445661][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3071.490040][ C0] sd 0:0:1:0: [sg0] tag#6176 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3071.492847][ T28] audit: type=1800 audit(1600161536.029:181): pid=5573 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15685 res=0 [ 3071.500688][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB: Test Unit Ready [ 3071.526056][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.535948][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.545791][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.555627][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.565574][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.575411][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.585260][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.595243][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.605085][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.614933][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.624778][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.630994][ C1] sd 0:0:1:0: [sg0] tag#6175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3071.634627][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.645101][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB: Test Unit Ready [ 3071.654807][ C0] sd 0:0:1:0: [sg0] tag#6176 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3071.661380][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.678665][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.688656][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.698531][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.708399][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.718259][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.728128][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.737996][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.747864][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.757764][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.767635][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.777527][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3071.787506][ C1] sd 0:0:1:0: [sg0] tag#6175 CDB[c0]: 00 00 00 00 00 00 00 00 09:18:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 09:18:56 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c4000000", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) [ 3071.821518][ T28] audit: type=1800 audit(1600161536.269:182): pid=5572 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15788 res=0 09:18:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) [ 3071.982338][ T5582] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3072.039377][ T5586] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3072.272961][ T28] audit: type=1800 audit(1600161536.809:183): pid=5588 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15685 res=0 [ 3072.485680][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3072.532533][ T28] audit: type=1800 audit(1600161537.069:184): pid=5593 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15694 res=0 09:18:56 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 09:18:56 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x200002}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r2) [ 3072.680914][ C0] sd 0:0:1:0: [sg0] tag#6187 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3072.691582][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB: Test Unit Ready [ 3072.698259][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.708188][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.718028][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.728436][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.738275][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.748115][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.758014][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.767874][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.777715][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.787553][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.797383][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.807253][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.817101][ C0] sd 0:0:1:0: [sg0] tag#6187 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3072.824979][ C0] sd 0:0:1:0: [sg0] tag#6192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3072.835597][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB: Test Unit Ready [ 3072.842305][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.852155][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.862018][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.871855][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.881706][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.891538][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.901365][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.911223][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.921057][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.930921][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.940750][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.950589][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3072.960412][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[c0]: 00 00 00 00 00 00 00 00 09:18:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 09:18:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:18:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11e8ab1a556641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) 09:18:57 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x200002}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r2) 09:18:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11e8ab1a556641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) 09:18:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3073.524706][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:58 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x200002}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r2) [ 3073.731576][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 09:18:58 executing program 1: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) [ 3073.921553][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:18:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11e8ab1a556641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) 09:18:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:18:58 executing program 1: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) [ 3074.406910][ C0] sd 0:0:1:0: [sg0] tag#6151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3074.417728][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB: Test Unit Ready [ 3074.424485][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.434374][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.444230][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.454124][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.463973][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.473808][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.483651][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.493494][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.503340][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.513191][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.523021][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.532877][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.542702][ C0] sd 0:0:1:0: [sg0] tag#6151 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3074.563261][ T28] audit: type=1800 audit(1600161539.100:185): pid=5621 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15694 res=0 [ 3074.587230][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3074.615595][ C1] sd 0:0:1:0: [sg0] tag#6158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3074.628505][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB: Test Unit Ready [ 3074.635266][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.645165][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.655109][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.665014][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.675163][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.685087][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.695002][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.704901][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.714820][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.724746][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.734669][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.744606][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3074.754511][ C1] sd 0:0:1:0: [sg0] tag#6158 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3074.845239][ T28] audit: type=1800 audit(1600161539.340:186): pid=5618 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15788 res=0 09:18:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0x430409f3, 0x1}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xa0) write$P9_RREADDIR(r1, 0x0, 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aaabc81e1520000000000000001000fff640b6db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765029b29000000000080812d274014ae40b8ff000000e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000180)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r3, 0x10, 0xce, 0x3fda) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 09:18:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 09:18:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11e8ab1a556641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) 09:18:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:18:59 executing program 1: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) [ 3075.602060][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:00 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x317, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 09:19:00 executing program 1: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 09:19:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x100000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 09:19:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 09:19:00 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 3076.250872][T30066] usb 5-1: new high-speed USB device number 29 using dummy_hcd 09:19:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) [ 3076.611613][T30066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3076.622862][T30066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3076.633018][T30066] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 3076.642807][T30066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:19:01 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 3076.655414][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3076.844505][T30066] usb 5-1: config 0 descriptor?? [ 3076.942842][ C1] sd 0:0:1:0: [sg0] tag#6171 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3076.953562][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB: Test Unit Ready [ 3076.960383][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3076.969891][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3076.970216][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3076.988007][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3076.997875][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.007730][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.017583][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.027448][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.037361][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.037489][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.037612][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.037743][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.037867][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3077.037984][ C1] sd 0:0:1:0: [sg0] tag#6171 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3077.104036][ T28] audit: type=1800 audit(1600161541.640:187): pid=5662 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15788 res=0 [ 3077.476540][T30066] wacom 0003:056A:0317.0065: unknown main item tag 0x0 [ 3077.484430][T30066] wacom 0003:056A:0317.0065: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 3077.496609][T30066] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.0065/input/input211 [ 3077.639948][T30066] wacom 0003:056A:0317.0065: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 3077.695185][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3077.725248][T30066] usb 5-1: USB disconnect, device number 29 09:19:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x100000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 09:19:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) 09:19:02 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 09:19:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 09:19:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x100000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) [ 3078.504238][T30066] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3078.726970][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3078.881221][T30066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3078.892802][T30066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3078.902909][T30066] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 3078.912214][T30066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3079.004539][T30066] usb 5-1: config 0 descriptor?? 09:19:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x317, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 09:19:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 09:19:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x100000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 09:19:03 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfe9a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 09:19:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) [ 3079.394417][T30066] usbhid 5-1:0.0: can't add hid device: -71 [ 3079.400842][T30066] usbhid: probe of 5-1:0.0 failed with error -71 [ 3079.467662][ T5716] input: syz1 as /devices/virtual/input/input214 [ 3079.473875][T30066] usb 5-1: USB disconnect, device number 30 [ 3079.760959][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) 09:19:04 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x100000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 09:19:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6c, &(0x7f0000000180)="c4c691019919da078a0098d1e0c393b040f762910000000000000022addee07bee0e6333b5cacd893169b618322ff6602022511253508b5a4496728c2b46e1bc340e2997b9a3406ea73b690808ffdb2dc4a7410b23e405cc30094b1adacdcfac320001000044e203c4b1bc83"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x3d) 09:19:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) [ 3079.999873][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3080.139556][ T5015] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3080.275173][ T5745] input: syz1 as /devices/virtual/input/input216 [ 3080.505328][ T5015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3080.516574][ T5015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3080.526721][ T5015] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 3080.536057][ T5015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:19:05 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000380)={{0x5}}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000340), 0x2) pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x8, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) mlockall(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 09:19:05 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, 0x4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x43, 0x0, 0x0) [ 3080.749887][ T5015] usb 5-1: config 0 descriptor?? 09:19:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x100000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) [ 3080.801936][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.031038][ T5760] sctp: [Deprecated]: syz-executor.2 (pid 5760) Use of int in maxseg socket option. [ 3081.031038][ T5760] Use struct sctp_assoc_value instead [ 3081.090413][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.130273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.152612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.171359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.181831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.191165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.240201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.813286][ T5760] sctp: [Deprecated]: syz-executor.2 (pid 5760) Use of int in maxseg socket option. [ 3081.813286][ T5760] Use struct sctp_assoc_value instead [ 3082.246698][ T5015] wacom 0003:056A:0317.0066: unknown main item tag 0x0 [ 3082.254507][ T5015] wacom 0003:056A:0317.0066: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 3082.266417][ T5015] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.0066/input/input217 [ 3082.399415][ T5015] wacom 0003:056A:0317.0066: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 3082.541543][ T8693] usb 5-1: USB disconnect, device number 31 09:19:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x317, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 09:19:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 09:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) 09:19:07 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000380)={{0x5}}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000340), 0x2) pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x8, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) mlockall(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 09:19:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x100000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 09:19:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_IFALIAS={0x14}]}, 0x48}}, 0x0) 09:19:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 09:19:08 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000380)={{0x5}}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000340), 0x2) pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x8, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) mlockall(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 3084.307568][ T9024] usb 5-1: new high-speed USB device number 32 using dummy_hcd 09:19:08 executing program 1: pipe(&(0x7f0000000280)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r1, 0x0) 09:19:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_IFALIAS={0x14}]}, 0x48}}, 0x0) [ 3084.650517][ T5818] input: syz1 as /devices/virtual/input/input221 [ 3084.743854][ T9024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3084.755397][ T9024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3084.765532][ T9024] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 3084.774872][ T9024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3084.892250][ T9024] usb 5-1: config 0 descriptor?? [ 3084.909523][ T5828] net_ratelimit: 12 callbacks suppressed [ 3084.909570][ T5828] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 09:19:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:09 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000380)={{0x5}}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000340), 0x2) pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x8, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) mlockall(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 3085.367048][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3085.386977][ T9024] wacom 0003:056A:0317.0067: unknown main item tag 0x0 [ 3085.394948][ T9024] wacom 0003:056A:0317.0067: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 3085.466226][ T9024] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.0067/input/input222 [ 3085.573557][ C0] sd 0:0:1:0: [sg0] tag#6192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3085.584297][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB: Test Unit Ready [ 3085.591074][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.600938][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.610775][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.620667][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.630515][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.640352][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.650234][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.660078][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.669945][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.679772][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.689631][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.699468][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3085.709289][ C0] sd 0:0:1:0: [sg0] tag#6192 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3085.751067][ T9024] wacom 0003:056A:0317.0067: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 3085.863452][ T9024] usb 5-1: USB disconnect, device number 32 09:19:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x317, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 09:19:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_IFALIAS={0x14}]}, 0x48}}, 0x0) 09:19:11 executing program 0: unshare(0x20600) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xfffffc01) 09:19:11 executing program 1: pipe(&(0x7f0000000280)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r1, 0x0) 09:19:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x929301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/5) syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) 09:19:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_IFALIAS={0x14}]}, 0x48}}, 0x0) [ 3086.360972][ C0] sd 0:0:1:0: [sg0] tag#6193 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3086.361095][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB: Test Unit Ready [ 3086.361224][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.361350][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x6e25, @broadcast}, 0x10) [ 3086.361481][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.361607][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.361728][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:12 executing program 1: pipe(&(0x7f0000000280)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r1, 0x0) 09:19:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x929301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/5) syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) [ 3086.361854][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x6e25, @broadcast}, 0x10) [ 3086.361978][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.362105][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.362231][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.362356][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.362488][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.362613][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3086.362732][ C0] sd 0:0:1:0: [sg0] tag#6193 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3086.427539][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3086.496125][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3086.618700][ T5874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3087.049620][T27548] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3087.116891][ T5889] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3087.446132][T27548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3087.446271][T27548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3087.446441][T27548] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 3087.446564][T27548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3087.450609][T27548] usb 5-1: config 0 descriptor?? [ 3087.523941][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3087.945329][T27548] wacom 0003:056A:0317.0068: unknown main item tag 0x0 [ 3087.946092][T27548] wacom 0003:056A:0317.0068: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 3087.948669][T27548] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.0068/input/input225 [ 3087.996671][T27548] wacom 0003:056A:0317.0068: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 3088.147453][ T9024] usb 5-1: USB disconnect, device number 33 [ 3088.563368][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3089.442406][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c4945c08ba8c552fc99a7422007653872ecb414ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f70d85463c57c5bb1f1084e683b591fc61838a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f00000000000000000087fa929349c8ff5b168c6f2ed20cf82b06b085deb4775bf66b9eee274a3ba2c4d94720fe984cb0a0513d2c49a964383d2bfabb"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x6e25, @broadcast}, 0x10) [ 3089.603080][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x929301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/5) syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) 09:19:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x6e25, @broadcast}, 0x10) 09:19:14 executing program 1: pipe(&(0x7f0000000280)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r1, 0x0) 09:19:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x929301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/5) syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) [ 3090.087010][ C0] sd 0:0:1:0: [sg0] tag#6194 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3090.097691][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB: Test Unit Ready [ 3090.104606][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.114503][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.124411][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.134408][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.144359][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.154214][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.164067][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.174038][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x6e25, @broadcast}, 0x10) [ 3090.183889][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.193818][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.203674][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.213519][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3090.223365][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[c0]: 00 00 00 00 00 00 00 00 09:19:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x929301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/5) syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) 09:19:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x929301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/5) syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) 09:19:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x6e25, @broadcast}, 0x10) [ 3090.642143][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3091.237293][ C0] sd 0:0:1:0: [sg0] tag#6195 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3091.237415][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB: Test Unit Ready [ 3091.237548][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.237678][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.237807][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.237937][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.238061][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.238361][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.238496][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.238622][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.238749][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.238875][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.239002][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.239131][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3091.239250][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3091.684083][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x929301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/5) syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) 09:19:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 09:19:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c4945c08ba8c552fc99a7422007653872ecb414ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f70d85463c57c5bb1f1084e683b591fc61838a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f00000000000000000087fa929349c8ff5b168c6f2ed20cf82b06b085deb4775bf66b9eee274a3ba2c4d94720fe984cb0a0513d2c49a964383d2bfabb"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) [ 3092.480056][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3092.722601][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3092.731503][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3092.827091][ C1] sd 0:0:1:0: [sg0] tag#6146 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3092.838242][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB: Test Unit Ready [ 3092.845048][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.854937][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.864827][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.874804][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.884696][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.894597][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.904476][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.914359][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.924230][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.934110][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.944280][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.953055][ C0] sd 0:0:1:0: [sg0] tag#6147 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3092.954387][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.964828][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB: Test Unit Ready [ 3092.974540][ C1] sd 0:0:1:0: [sg0] tag#6146 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3092.981138][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3092.998532][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:17 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) 09:19:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x6e25, @broadcast}, 0x10) [ 3093.008464][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.008593][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.008722][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.008848][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.009003][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.009132][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:18 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) [ 3093.009260][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.009387][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="f69a4243474cabd59716fb7e541db003dddafbedbf6f7c82161f4277a4e04b790dbbf2d571c5503e", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) [ 3093.009522][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.009637][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.009761][ C0] sd 0:0:1:0: [sg0] tag#6147 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3093.349647][ C0] sd 0:0:1:0: [sg0] tag#6148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3093.349771][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB: Test Unit Ready [ 3093.349900][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.350031][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:18 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) [ 3093.350159][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.350286][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="f69a4243474cabd59716fb7e541db003dddafbedbf6f7c82161f4277a4e04b790dbbf2d571c5503e", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) [ 3093.350418][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.350545][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.350683][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.350807][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.350961][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.351106][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.351234][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:19:19 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, 0x0) [ 3093.351362][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3093.351483][ C0] sd 0:0:1:0: [sg0] tag#6148 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3093.894307][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3094.963648][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="f69a4243474cabd59716fb7e541db003dddafbedbf6f7c82161f4277a4e04b790dbbf2d571c5503e", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) 09:19:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c4945c08ba8c552fc99a7422007653872ecb414ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab00f70d85463c57c5bb1f1084e683b591fc61838a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fbe09a7eb84cae8e538f0c886871080d1588bb30abcbfecb4e10d4097a02736f00000000000000000087fa929349c8ff5b168c6f2ed20cf82b06b085deb4775bf66b9eee274a3ba2c4d94720fe984cb0a0513d2c49a964383d2bfabb"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1c2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449710f20c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 09:19:19 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000049db2e08450c10105d6d0000000109021b0001000000000904000001030307000905850b"], 0x0) 09:19:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x14, &(0x7f0000000180)={r1}, 0x8) [ 3095.407063][ C0] not chained 320000 origins [ 3095.411720][ C0] CPU: 0 PID: 5053 Comm: kworker/u4:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 3095.420291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3095.430360][ C0] Workqueue: krdsd rds_connect_worker [ 3095.435790][ C0] Call Trace: [ 3095.439076][ C0] [ 3095.441942][ C0] dump_stack+0x21c/0x280 [ 3095.446282][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 3095.452010][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3095.457823][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.463030][ C0] ? __should_failslab+0x1f6/0x290 [ 3095.468149][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.473354][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3095.479181][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 3095.485338][ C0] ? tcp_parse_options+0x206d/0x2100 [ 3095.490643][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.495848][ C0] __msan_chain_origin+0x50/0x90 [ 3095.500795][ C0] tcp_conn_request+0x19a0/0x4c30 [ 3095.505845][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3095.511657][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.516972][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.522235][ C0] tcp_v4_conn_request+0x201/0x290 [ 3095.527358][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3095.532401][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 3095.537694][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3095.543133][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3095.548944][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 3095.555139][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.560397][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3095.566223][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.571436][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3095.576044][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3095.580552][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.585776][ C0] ? tcp_filter+0xf0/0xf0 [ 3095.590113][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3095.595647][ C0] ip_local_deliver+0x727/0x8d0 [ 3095.600513][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 3095.605616][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3095.611254][ C0] ip_rcv+0x795/0x810 [ 3095.615249][ C0] ? ip_rcv_core+0x1490/0x1490 [ 3095.620023][ C0] __netif_receive_skb+0x265/0x670 [ 3095.625254][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 3095.630848][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 3095.636492][ C0] process_backlog+0x50d/0xba0 [ 3095.641352][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3095.647165][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3095.652452][ C0] napi_poll+0x43b/0xfd0 [ 3095.656703][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.662022][ C0] net_rx_action+0x35c/0xd40 [ 3095.666628][ C0] ? net_tx_action+0xdc0/0xdc0 [ 3095.671399][ C0] __do_softirq+0x2ea/0x7f5 [ 3095.675914][ C0] asm_call_on_stack+0xf/0x20 [ 3095.680671][ C0] [ 3095.683623][ C0] do_softirq_own_stack+0x7c/0xa0 [ 3095.688658][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 3095.693865][ C0] local_bh_enable+0x36/0x40 [ 3095.698460][ C0] ip_finish_output2+0x2459/0x2930 [ 3095.703580][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 3095.709305][ C0] ? nf_ct_deliver_cached_events+0x52f/0x7e0 [ 3095.715289][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.720690][ C0] __ip_finish_output+0xeb5/0xfd0 [ 3095.725731][ C0] ip_finish_output+0x14b/0x4b0 [ 3095.730596][ C0] ip_output+0x5f2/0x6e0 [ 3095.734942][ C0] ? ip_mc_finish_output+0x780/0x780 [ 3095.740235][ C0] ? ip_finish_output+0x4b0/0x4b0 [ 3095.745266][ C0] __ip_queue_xmit+0x1eac/0x23c0 [ 3095.750215][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3095.756030][ C0] ? ipv4_default_advmss+0x709/0x7d0 [ 3095.761320][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.766533][ C0] ip_queue_xmit+0xcc/0xf0 [ 3095.770959][ C0] ? tcp_v4_fill_cb+0x5e0/0x5e0 [ 3095.775814][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 3095.781018][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 3095.786742][ C0] tcp_connect+0x153f/0x3bb0 [ 3095.791459][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 3095.796760][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3095.802581][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 3095.808479][ C0] ? prandom_u32+0x1c1/0x280 [ 3095.813150][ C0] tcp_v4_connect+0x2532/0x26c0 [ 3095.818026][ C0] ? tcp_twsk_unique+0xe20/0xe20 [ 3095.823078][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 3095.828561][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.833856][ C0] inet_stream_connect+0x101/0x180 [ 3095.838978][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 3095.844618][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 3095.850381][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.855585][ C0] ? rds_tcp_state_change+0x400/0x400 [ 3095.860982][ C0] rds_connect_worker+0x36b/0x550 [ 3095.866024][ C0] ? rds_addr_cmp+0x290/0x290 [ 3095.870705][ C0] process_one_work+0x1688/0x2140 [ 3095.875746][ C0] worker_thread+0x10bc/0x2730 [ 3095.880511][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3095.885725][ C0] kthread+0x551/0x590 [ 3095.889799][ C0] ? process_one_work+0x2140/0x2140 [ 3095.895002][ C0] ? kthread_blkcg+0x110/0x110 [ 3095.899769][ C0] ret_from_fork+0x1f/0x30 [ 3095.904187][ C0] Uninit was stored to memory at: [ 3095.909213][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3095.914929][ C0] __msan_chain_origin+0x50/0x90 [ 3095.919944][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3095.924972][ C0] tcp_v4_conn_request+0x201/0x290 [ 3095.930090][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3095.935118][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3095.940491][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3095.945085][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3095.949639][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3095.955283][ C0] ip_local_deliver+0x727/0x8d0 [ 3095.960189][ C0] ip_rcv+0x795/0x810 [ 3095.964224][ C0] __netif_receive_skb+0x265/0x670 [ 3095.969342][ C0] process_backlog+0x50d/0xba0 [ 3095.974108][ C0] napi_poll+0x43b/0xfd0 [ 3095.978506][ C0] net_rx_action+0x35c/0xd40 [ 3095.983190][ C0] __do_softirq+0x2ea/0x7f5 [ 3095.987681][ C0] [ 3095.990090][ C0] Uninit was stored to memory at: [ 3095.995121][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3096.000843][ C0] __msan_chain_origin+0x50/0x90 [ 3096.005856][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3096.011140][ C0] tcp_conn_request+0x3046/0x4c30 [ 3096.016166][ C0] tcp_v4_conn_request+0x201/0x290 [ 3096.021356][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3096.026378][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3096.031749][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3096.036521][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3096.041029][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3096.046487][ C0] ip_local_deliver+0x727/0x8d0 [ 3096.051336][ C0] ip_rcv+0x795/0x810 [ 3096.055321][ C0] __netif_receive_skb+0x265/0x670 [ 3096.060433][ C0] process_backlog+0x50d/0xba0 [ 3096.065197][ C0] napi_poll+0x43b/0xfd0 [ 3096.069441][ C0] net_rx_action+0x35c/0xd40 [ 3096.074085][ C0] __do_softirq+0x2ea/0x7f5 [ 3096.078622][ C0] [ 3096.080947][ C0] Uninit was stored to memory at: [ 3096.086060][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3096.091779][ C0] __msan_chain_origin+0x50/0x90 [ 3096.096716][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3096.101743][ C0] tcp_v4_conn_request+0x201/0x290 [ 3096.106853][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3096.111877][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3096.117322][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3096.121913][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3096.126415][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3096.131873][ C0] ip_local_deliver+0x727/0x8d0 [ 3096.136763][ C0] ip_rcv+0x795/0x810 [ 3096.140748][ C0] __netif_receive_skb+0x265/0x670 [ 3096.145861][ C0] process_backlog+0x50d/0xba0 [ 3096.150628][ C0] napi_poll+0x43b/0xfd0 [ 3096.154871][ C0] net_rx_action+0x35c/0xd40 [ 3096.159464][ C0] __do_softirq+0x2ea/0x7f5 [ 3096.163963][ C0] [ 3096.166286][ C0] Uninit was stored to memory at: [ 3096.171312][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3096.177029][ C0] __msan_chain_origin+0x50/0x90 [ 3096.181970][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3096.187256][ C0] tcp_conn_request+0x3046/0x4c30 [ 3096.192327][ C0] tcp_v4_conn_request+0x201/0x290 [ 3096.197532][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3096.202559][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3096.207934][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3096.212529][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3096.217032][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3096.222494][ C0] ip_local_deliver+0x727/0x8d0 [ 3096.227348][ C0] ip_rcv+0x795/0x810 [ 3096.231332][ C0] __netif_receive_skb+0x265/0x670 [ 3096.236444][ C0] process_backlog+0x50d/0xba0 [ 3096.241213][ C0] napi_poll+0x43b/0xfd0 [ 3096.245466][ C0] net_rx_action+0x35c/0xd40 [ 3096.250056][ C0] __do_softirq+0x2ea/0x7f5 [ 3096.254632][ C0] [ 3096.256956][ C0] Uninit was stored to memory at: [ 3096.261985][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3096.267703][ C0] __msan_chain_origin+0x50/0x90 [ 3096.272639][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3096.277664][ C0] tcp_v4_conn_request+0x201/0x290 [ 3096.282775][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3096.287800][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3096.293174][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3096.297763][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3096.302266][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3096.307720][ C0] ip_local_deliver+0x727/0x8d0 [ 3096.312567][ C0] ip_rcv+0x795/0x810 [ 3096.316550][ C0] __netif_receive_skb+0x265/0x670 [ 3096.321658][ C0] process_backlog+0x50d/0xba0 [ 3096.326418][ C0] napi_poll+0x43b/0xfd0 [ 3096.330748][ C0] net_rx_action+0x35c/0xd40 [ 3096.335388][ C0] __do_softirq+0x2ea/0x7f5 [ 3096.339906][ C0] [ 3096.342229][ C0] Uninit was stored to memory at: [ 3096.347305][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3096.353029][ C0] __msan_chain_origin+0x50/0x90 [ 3096.357970][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3096.363341][ C0] tcp_conn_request+0x3046/0x4c30 [ 3096.368364][ C0] tcp_v4_conn_request+0x201/0x290 [ 3096.373473][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3096.378504][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3096.383876][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3096.388517][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3096.393019][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3096.398476][ C0] ip_local_deliver+0x727/0x8d0 [ 3096.403328][ C0] ip_rcv+0x795/0x810 [ 3096.407310][ C0] __netif_receive_skb+0x265/0x670 [ 3096.412470][ C0] process_backlog+0x50d/0xba0 [ 3096.417241][ C0] napi_poll+0x43b/0xfd0 [ 3096.421486][ C0] net_rx_action+0x35c/0xd40 [ 3096.426422][ C0] __do_softirq+0x2ea/0x7f5 [ 3096.430945][ C0] [ 3096.433272][ C0] Uninit was stored to memory at: [ 3096.438304][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3096.444024][ C0] __msan_chain_origin+0x50/0x90 [ 3096.448961][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3096.453988][ C0] tcp_v4_conn_request+0x201/0x290 [ 3096.459100][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3096.464268][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3096.469727][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3096.474321][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3096.478848][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3096.484395][ C0] ip_local_deliver+0x727/0x8d0 [ 3096.489247][ C0] ip_rcv+0x795/0x810 [ 3096.493233][ C0] __netif_receive_skb+0x265/0x670 [ 3096.498347][ C0] process_backlog+0x50d/0xba0 [ 3096.503112][ C0] napi_poll+0x43b/0xfd0 [ 3096.507442][ C0] net_rx_action+0x35c/0xd40 [ 3096.512032][ C0] __do_softirq+0x2ea/0x7f5 [ 3096.516672][ C0] [ 3096.519007][ C0] Uninit was created at: [ 3096.523258][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 3096.528948][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 3096.533809][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 3096.539273][ C0] alloc_pages_current+0x685/0xb50 [ 3096.544384][ C0] alloc_slab_page+0x11c/0x1240 [ 3096.549236][ C0] new_slab+0x2bf/0x10c0 [ 3096.553481][ C0] ___slab_alloc+0xcd3/0x18a0 [ 3096.558166][ C0] kmem_cache_alloc+0xb70/0xc50 [ 3096.563029][ C0] inet_reqsk_alloc+0xaf/0x910 [ 3096.567798][ C0] tcp_conn_request+0x8dc/0x4c30 [ 3096.572739][ C0] tcp_v4_conn_request+0x201/0x290 [ 3096.577856][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3096.583233][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3096.587827][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3096.592334][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3096.597858][ C0] ip_local_deliver+0x727/0x8d0 [ 3096.602773][ C0] ip_sublist_rcv+0x1389/0x1540 [ 3096.607623][ C0] ip_list_rcv+0x904/0x970 [ 3096.612055][ C0] __netif_receive_skb_list_core+0xeab/0x12b0 [ 3096.618174][ C0] __netif_receive_skb_list+0x818/0x990 [ 3096.623721][ C0] netif_receive_skb_list_internal+0xdfa/0xe20 [ 3096.629872][ C0] napi_complete_done+0x552/0xf90 [ 3096.634901][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 3096.640395][ C0] virtnet_poll+0x170f/0x1d10 [ 3096.645158][ C0] napi_poll+0x43b/0xfd0 [ 3096.649423][ C0] net_rx_action+0x35c/0xd40 [ 3096.654013][ C0] __do_softirq+0x2ea/0x7f5 [ 3096.665734][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3096.698479][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3096.962121][ C1] sd 0:0:1:0: [sg0] tag#6149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3096.973137][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB: Test Unit Ready [ 3096.979948][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3096.989879][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3096.999858][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.009882][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.019948][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.029864][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.039787][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.049854][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.059781][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.069699][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.079759][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.089777][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.099695][ C1] sd 0:0:1:0: [sg0] tag#6149 CDB[c0]: 00 00 00 00 00 00 00 00 09:19:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="f69a4243474cabd59716fb7e541db003dddafbedbf6f7c82161f4277a4e04b790dbbf2d571c5503e", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) [ 3097.962936][ C1] sd 0:0:1:0: [sg0] tag#6150 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3097.973887][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB: Test Unit Ready [ 3097.980783][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3097.990893][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.000859][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.010826][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.020918][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.031144][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.041119][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.051212][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.061185][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.071267][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.081241][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.091544][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.101611][ C1] sd 0:0:1:0: [sg0] tag#6150 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3098.109663][ C1] sd 0:0:1:0: [sg0] tag#6151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3098.120602][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB: Test Unit Ready [ 3098.127367][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.137465][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.147451][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.157555][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.167659][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.177892][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.187955][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.197942][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.207903][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.217971][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.227937][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.237894][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3098.247952][ C1] sd 0:0:1:0: [sg0] tag#6151 CDB[c0]: 00 00 00 00 00 00 00 00 09:19:22 executing program 5: r0 = socket(0x2b, 0x801, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) connect$rds(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) io_submit(r1, 0x1, &(0x7f0000001180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="d6", 0x1}]) [ 3098.264241][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:22 executing program 1: unshare(0x20020400) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet(0x10, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x84ffde, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 09:19:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}}, 0x0) 09:19:23 executing program 1: unshare(0x20020400) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet(0x10, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x84ffde, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 09:19:23 executing program 5: r0 = socket(0x2b, 0x801, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) connect$rds(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) io_submit(r1, 0x1, &(0x7f0000001180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="d6", 0x1}]) 09:19:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}}, 0x0) 09:19:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) [ 3099.285989][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3099.478315][T16699] usb 1-1: new high-speed USB device number 27 using dummy_hcd 09:19:24 executing program 1: unshare(0x20020400) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet(0x10, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x84ffde, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 09:19:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x14, &(0x7f0000000180)={r1}, 0x8) [ 3099.718010][T16699] usb 1-1: Using ep0 maxpacket: 8 [ 3099.759014][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3099.839237][T16699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3099.850524][T16699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3099.860769][T16699] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 3099.870026][T16699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3100.099531][T16699] usb 1-1: config 0 descriptor?? [ 3100.146581][T16699] yurex 1-1:0.0: Could not submitting URB [ 3100.153350][T16699] yurex: probe of 1-1:0.0 failed with error -5 [ 3100.319404][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3100.381087][T16699] usb 1-1: USB disconnect, device number 27 [ 3101.178080][T16699] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 3101.361077][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3101.417908][T16699] usb 1-1: Using ep0 maxpacket: 8 [ 3101.538971][T16699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3101.550308][T16699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3101.560306][T16699] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 3101.569632][T16699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.660133][T16699] usb 1-1: config 0 descriptor?? [ 3101.704368][T16699] yurex 1-1:0.0: Could not submitting URB [ 3101.710664][T16699] yurex: probe of 1-1:0.0 failed with error -5 [ 3101.913028][T16699] usb 1-1: USB disconnect, device number 28 09:19:26 executing program 5: r0 = socket(0x2b, 0x801, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) connect$rds(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) io_submit(r1, 0x1, &(0x7f0000001180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="d6", 0x1}]) 09:19:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}}, 0x0) 09:19:26 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000049db2e08450c10105d6d0000000109021b0001000000000904000001030307000905850b"], 0x0) 09:19:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) 09:19:26 executing program 1: unshare(0x20020400) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet(0x10, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x84ffde, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 09:19:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x14, &(0x7f0000000180)={r1}, 0x8) [ 3102.351117][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3102.431269][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}}, 0x0) 09:19:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, 0x0, 0x0, 0x0) 09:19:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) 09:19:27 executing program 5: r0 = socket(0x2b, 0x801, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) connect$rds(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) io_submit(r1, 0x1, &(0x7f0000001180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="d6", 0x1}]) [ 3102.807046][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3103.438881][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x12, 0x105, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="a8aff9e391a206d7fe4f6c6aa57c742348eaa052936dfe8b821e69005ffc9a14a0"]}]}, 0x4c}], 0x1}, 0x0) 09:19:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f0000003fc0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x14, &(0x7f0000000180)={r1}, 0x8) 09:19:28 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, 0x0, 0x0, 0x0) 09:19:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) [ 3104.037586][T27548] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3104.298466][T27548] usb 1-1: Using ep0 maxpacket: 8 [ 3104.437882][T27548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3104.449170][T27548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3104.459156][T27548] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 3104.468452][T27548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3104.479774][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3104.737155][T27548] usb 1-1: config 0 descriptor?? [ 3104.794136][T27548] yurex 1-1:0.0: Could not submitting URB [ 3104.800421][T27548] yurex: probe of 1-1:0.0 failed with error -5 [ 3105.055102][T27548] usb 1-1: USB disconnect, device number 29 [ 3105.534082][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:30 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000049db2e08450c10105d6d0000000109021b0001000000000904000001030307000905850b"], 0x0) 09:19:30 executing program 5: setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) 09:19:30 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000200)="2d3be45632d2a100ab87eb4781b2d999264305a58e77892bb3c3ded9472b623ba9926c04ad9b453b05a04f4f71f8d0409bbabf4a307eabe0b037f368a25219949b4b0bde5504fea7cb8fe8eadc7e98f66efea94aec7a3ab3e639bd80ce20854d3b58953629a4720f89ae60528661348e88176f2fc537294e5198272f21466ef7b581c7000ec7dcac1589a984b015aeeb7bbc81f434a5217e557eb40f78234a8d3c59f4a5f44053edd287d92cbf21b12863d4b229c6cc77850a63df44d22a88080ebaee3ef23baea23ded06cf97", 0x0}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1f2c) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x8}}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0}) 09:19:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, 0x0, 0x0, 0x0) 09:19:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x12, 0x105, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="a8aff9e391a206d7fe4f6c6aa57c742348eaa052936dfe8b821e69005ffc9a14a0"]}]}, 0x4c}], 0x1}, 0x0) 09:19:30 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000000100)={0x0, 'ip6_vti0\x00'}, 0x18) [ 3105.857902][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3105.887435][T19311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3105.930610][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3105.956312][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 09:19:30 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000200)="2d3be45632d2a100ab87eb4781b2d999264305a58e77892bb3c3ded9472b623ba9926c04ad9b453b05a04f4f71f8d0409bbabf4a307eabe0b037f368a25219949b4b0bde5504fea7cb8fe8eadc7e98f66efea94aec7a3ab3e639bd80ce20854d3b58953629a4720f89ae60528661348e88176f2fc537294e5198272f21466ef7b581c7000ec7dcac1589a984b015aeeb7bbc81f434a5217e557eb40f78234a8d3c59f4a5f44053edd287d92cbf21b12863d4b229c6cc77850a63df44d22a88080ebaee3ef23baea23ded06cf97", 0x0}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1f2c) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x8}}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0}) 09:19:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, 0x0, 0x0, 0x0) 09:19:31 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000000100)={0x0, 'ip6_vti0\x00'}, 0x18) [ 3106.691735][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3106.813177][ T6159] 8021q: adding VLAN 0 to HW filter on device bond9 09:19:31 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000200)="2d3be45632d2a100ab87eb4781b2d999264305a58e77892bb3c3ded9472b623ba9926c04ad9b453b05a04f4f71f8d0409bbabf4a307eabe0b037f368a25219949b4b0bde5504fea7cb8fe8eadc7e98f66efea94aec7a3ab3e639bd80ce20854d3b58953629a4720f89ae60528661348e88176f2fc537294e5198272f21466ef7b581c7000ec7dcac1589a984b015aeeb7bbc81f434a5217e557eb40f78234a8d3c59f4a5f44053edd287d92cbf21b12863d4b229c6cc77850a63df44d22a88080ebaee3ef23baea23ded06cf97", 0x0}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1f2c) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x8}}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0}) 09:19:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x12, 0x105, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="a8aff9e391a206d7fe4f6c6aa57c742348eaa052936dfe8b821e69005ffc9a14a0"]}]}, 0x4c}], 0x1}, 0x0) [ 3107.336069][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3107.382783][ T6159] bond10 (uninitialized): Released all slaves [ 3107.548447][ T8693] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 3107.599129][ T3811] net_ratelimit: 1 callbacks suppressed [ 3107.599161][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3107.630785][ T5266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3107.671558][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3107.708210][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3107.798386][ T8693] usb 1-1: Using ep0 maxpacket: 8 [ 3107.968804][ T8693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3107.979981][ T8693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3107.990036][ T8693] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 3107.999288][ T8693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3108.243169][ T8693] usb 1-1: config 0 descriptor?? [ 3108.299013][ T8693] yurex 1-1:0.0: Could not submitting URB [ 3108.305184][ T8693] yurex: probe of 1-1:0.0 failed with error -5 [ 3108.550808][ T8693] usb 1-1: USB disconnect, device number 30 [ 3108.720769][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3108.961958][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000049db2e08450c10105d6d0000000109021b0001000000000904000001030307000905850b"], 0x0) 09:19:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x6}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}]}}]}, 0x68}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 09:19:33 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000000100)={0x0, 'ip6_vti0\x00'}, 0x18) 09:19:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 09:19:33 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000200)="2d3be45632d2a100ab87eb4781b2d999264305a58e77892bb3c3ded9472b623ba9926c04ad9b453b05a04f4f71f8d0409bbabf4a307eabe0b037f368a25219949b4b0bde5504fea7cb8fe8eadc7e98f66efea94aec7a3ab3e639bd80ce20854d3b58953629a4720f89ae60528661348e88176f2fc537294e5198272f21466ef7b581c7000ec7dcac1589a984b015aeeb7bbc81f434a5217e557eb40f78234a8d3c59f4a5f44053edd287d92cbf21b12863d4b229c6cc77850a63df44d22a88080ebaee3ef23baea23ded06cf97", 0x0}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x1f2c) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x8}}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0}) 09:19:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x4c, 0x12, 0x105, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @nested={0x25, 0x0, 0x0, 0x1, [@generic="a8aff9e391a206d7fe4f6c6aa57c742348eaa052936dfe8b821e69005ffc9a14a0"]}]}, 0x4c}], 0x1}, 0x0) [ 3109.266569][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3109.383297][ T6230] 8021q: adding VLAN 0 to HW filter on device bond10 09:19:34 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000000100)={0x0, 'ip6_vti0\x00'}, 0x18) [ 3109.543208][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3109.764613][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 3110.061839][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3110.342354][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3110.469231][ T6291] 8021q: adding VLAN 0 to HW filter on device bond11 09:19:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}}, 0x0) [ 3110.797850][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 3110.847065][ T3695] usb 1-1: new high-speed USB device number 31 using dummy_hcd 09:19:35 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63ffff03010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:19:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000f9ff00000007000000", @ANYRES32=r2, @ANYBLOB="0000ffec0a000200cd"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 3111.097130][ T3695] usb 1-1: Using ep0 maxpacket: 8 [ 3111.218074][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3111.229430][ T3695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3111.239677][ T3695] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 3111.248907][ T3695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3111.296357][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3111.358124][ T6337] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3111.425787][ T3695] usb 1-1: config 0 descriptor?? [ 3111.472923][ T3695] yurex 1-1:0.0: Could not submitting URB [ 3111.479269][ T3695] yurex: probe of 1-1:0.0 failed with error -5 [ 3111.698132][ T4331] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 3111.796479][ T9024] usb 1-1: USB disconnect, device number 31 [ 3111.841139][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3111.934022][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3111.975302][ T4331] usb 4-1: Using ep0 maxpacket: 16 [ 3112.278645][ T4331] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 3112.288044][ T4331] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 3112.296526][ T4331] usb 4-1: Product: syz [ 3112.301143][ T4331] usb 4-1: Manufacturer: syz [ 3112.305883][ T4331] usb 4-1: SerialNumber: syz [ 3112.389247][ T4331] usb 4-1: config 0 descriptor?? [ 3112.433195][ T4331] i2c-tiny-usb 4-1:0.0: version 63.ce found at bus 004 address 121 [ 3112.647317][ T4331] (null): failure setting delay to 10us [ 3112.653249][ T4331] i2c-tiny-usb: probe of 4-1:0.0 failed with error -5 [ 3112.708941][ T4331] usb 4-1: USB disconnect, device number 121 09:19:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}}, 0x0) 09:19:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 09:19:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 09:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000f9ff00000007000000", @ANYRES32=r2, @ANYBLOB="0000ffec0a000200cd"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 3112.900300][T16699] net_ratelimit: 1 callbacks suppressed [ 3112.900326][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3113.020043][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3113.145416][ T6401] 8021q: adding VLAN 0 to HW filter on device bond12 [ 3113.289715][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3113.421796][ T6403] 8021q: adding VLAN 0 to HW filter on device bond12 09:19:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653078000053c27bc3276003639405cb4e774e8948a8a13aef4aed12f0000006edc00278dcff47d01fc1f4fd699f847605e03127172c61d79cf4dd76745a42980", 0x41}], 0x4, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @dev}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}]}, 0x64}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 3113.647231][ T3695] usb 4-1: new high-speed USB device number 122 using dummy_hcd 09:19:38 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}}, 0x0) [ 3113.967728][ T3695] usb 4-1: Using ep0 maxpacket: 16 [ 3114.056757][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000f9ff00000007000000", @ANYRES32=r2, @ANYBLOB="0000ffec0a000200cd"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:19:39 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63ffff03010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:19:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}}, 0x0) [ 3114.547674][ T3695] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 3114.557215][ T3695] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 3114.565721][ T3695] usb 4-1: Product: syz 09:19:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x178, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e) [ 3114.713331][ T3695] usb 4-1: config 0 descriptor?? 09:19:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 3114.780249][ T3695] usb 4-1: can't set config #0, error -71 [ 3114.843041][ T3695] usb 4-1: USB disconnect, device number 122 [ 3115.038734][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3115.125446][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:39 executing program 2: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x8087d, 0x0) [ 3115.260561][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3115.297361][ T3695] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 3115.396687][ T6505] 8021q: adding VLAN 0 to HW filter on device bond13 09:19:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000f9ff00000007000000", @ANYRES32=r2, @ANYBLOB="0000ffec0a000200cd"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:19:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x178, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e) [ 3115.648797][ T3695] usb 4-1: Using ep0 maxpacket: 16 [ 3115.968325][ T3695] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 3115.977646][ T3695] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 3115.986120][ T3695] usb 4-1: Product: syz [ 3115.990602][ T3695] usb 4-1: Manufacturer: syz [ 3115.995338][ T3695] usb 4-1: SerialNumber: syz [ 3116.175922][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:40 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x14) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)) [ 3116.303968][ T3695] usb 4-1: config 0 descriptor?? [ 3116.370194][ T3695] i2c-tiny-usb 4-1:0.0: version 63.ce found at bus 004 address 123 09:19:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x178, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e) [ 3116.616899][ T3695] (null): failure setting delay to 10us [ 3116.622832][ T3695] i2c-tiny-usb: probe of 4-1:0.0 failed with error -5 [ 3116.706558][ T3695] usb 4-1: USB disconnect, device number 123 [ 3117.206321][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) 09:19:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) 09:19:41 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) link(0x0, 0x0) 09:19:41 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x14) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)) 09:19:41 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63ffff03010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 09:19:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xffffff80, 0x178, 0x178, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x178, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e) 09:19:42 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x14) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)) 09:19:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) 09:19:42 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) [ 3118.084322][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3118.087158][T30066] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 3118.137975][ C0] not chained 330000 origins [ 3118.142610][ C0] CPU: 0 PID: 27616 Comm: kworker/u4:3 Not tainted 5.8.0-rc5-syzkaller #0 [ 3118.151093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3118.161148][ C0] Workqueue: krdsd rds_connect_worker [ 3118.166508][ C0] Call Trace: [ 3118.169778][ C0] [ 3118.172629][ C0] dump_stack+0x21c/0x280 [ 3118.176960][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 3118.182696][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.187887][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.193080][ C0] ? __should_failslab+0x1f6/0x290 [ 3118.198202][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.203393][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3118.209193][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 3118.215338][ C0] ? tcp_parse_options+0x206d/0x2100 [ 3118.220632][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.225822][ C0] __msan_chain_origin+0x50/0x90 [ 3118.230754][ C0] tcp_conn_request+0x15d4/0x4c30 [ 3118.235772][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 3118.241842][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3118.247906][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3118.253705][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.258899][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.264093][ C0] tcp_v4_conn_request+0x201/0x290 [ 3118.269203][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3118.274239][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 3118.279518][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3118.284887][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3118.290698][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 3118.296757][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.301963][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3118.307769][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.312964][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3118.317562][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3118.322186][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.327417][ C0] ? tcp_filter+0xf0/0xf0 [ 3118.331751][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3118.337224][ C0] ip_local_deliver+0x727/0x8d0 [ 3118.342085][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 3118.347110][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3118.352734][ C0] ip_rcv+0x795/0x810 [ 3118.356716][ C0] ? ip_rcv_core+0x1490/0x1490 [ 3118.361488][ C0] __netif_receive_skb+0x265/0x670 [ 3118.366595][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 3118.372131][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 3118.377763][ C0] process_backlog+0x50d/0xba0 [ 3118.382523][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3118.388323][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3118.393601][ C0] napi_poll+0x43b/0xfd0 [ 3118.397843][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.403035][ C0] net_rx_action+0x35c/0xd40 [ 3118.407624][ C0] ? net_tx_action+0xdc0/0xdc0 [ 3118.412381][ C0] __do_softirq+0x2ea/0x7f5 [ 3118.416884][ C0] asm_call_on_stack+0xf/0x20 [ 3118.421545][ C0] [ 3118.424479][ C0] do_softirq_own_stack+0x7c/0xa0 [ 3118.429505][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 3118.434702][ C0] local_bh_enable+0x36/0x40 [ 3118.439283][ C0] ip_finish_output2+0x2459/0x2930 [ 3118.444387][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 3118.450099][ C0] ? nf_ct_deliver_cached_events+0x52f/0x7e0 [ 3118.456070][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.461294][ C0] __ip_finish_output+0xeb5/0xfd0 [ 3118.466337][ C0] ip_finish_output+0x14b/0x4b0 [ 3118.471193][ C0] ip_output+0x5f2/0x6e0 [ 3118.475437][ C0] ? ip_mc_finish_output+0x780/0x780 [ 3118.480715][ C0] ? ip_finish_output+0x4b0/0x4b0 [ 3118.485729][ C0] __ip_queue_xmit+0x1eac/0x23c0 [ 3118.490663][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3118.496466][ C0] ? ipv4_default_advmss+0x709/0x7d0 [ 3118.501741][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.506944][ C0] ip_queue_xmit+0xcc/0xf0 [ 3118.511356][ C0] ? tcp_v4_fill_cb+0x5e0/0x5e0 [ 3118.516197][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 3118.521393][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 3118.527045][ C0] tcp_connect+0x153f/0x3bb0 [ 3118.531626][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 3118.536906][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3118.542722][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 3118.548608][ C0] ? prandom_u32+0x1c1/0x280 [ 3118.553196][ C0] tcp_v4_connect+0x2532/0x26c0 [ 3118.558059][ C0] ? tcp_twsk_unique+0xe20/0xe20 [ 3118.562991][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 3118.568450][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.573643][ C0] inet_stream_connect+0x101/0x180 [ 3118.578753][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 3118.584392][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 3118.590040][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.595234][ C0] ? rds_tcp_state_change+0x400/0x400 [ 3118.600595][ C0] rds_connect_worker+0x36b/0x550 [ 3118.605610][ C0] ? rds_addr_cmp+0x290/0x290 [ 3118.610282][ C0] process_one_work+0x1688/0x2140 [ 3118.615325][ C0] worker_thread+0x10bc/0x2730 [ 3118.620081][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3118.625297][ C0] kthread+0x551/0x590 [ 3118.629360][ C0] ? process_one_work+0x2140/0x2140 [ 3118.634556][ C0] ? kthread_blkcg+0x110/0x110 [ 3118.639318][ C0] ret_from_fork+0x1f/0x30 [ 3118.643756][ C0] Uninit was stored to memory at: [ 3118.648773][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3118.654591][ C0] __msan_chain_origin+0x50/0x90 [ 3118.659520][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3118.664550][ C0] tcp_v4_conn_request+0x201/0x290 [ 3118.669663][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3118.674684][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3118.680046][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3118.684628][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3118.689125][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3118.694575][ C0] ip_local_deliver+0x727/0x8d0 [ 3118.699423][ C0] ip_rcv+0x795/0x810 [ 3118.703395][ C0] __netif_receive_skb+0x265/0x670 [ 3118.708496][ C0] process_backlog+0x50d/0xba0 [ 3118.713261][ C0] napi_poll+0x43b/0xfd0 [ 3118.717501][ C0] net_rx_action+0x35c/0xd40 [ 3118.722097][ C0] __do_softirq+0x2ea/0x7f5 [ 3118.726614][ C0] [ 3118.728932][ C0] Uninit was stored to memory at: [ 3118.733951][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3118.739659][ C0] __msan_chain_origin+0x50/0x90 [ 3118.744607][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3118.749882][ C0] tcp_conn_request+0x3046/0x4c30 [ 3118.755000][ C0] tcp_v4_conn_request+0x201/0x290 [ 3118.760104][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3118.765122][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3118.770484][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3118.775064][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3118.779563][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3118.785012][ C0] ip_local_deliver+0x727/0x8d0 [ 3118.789852][ C0] ip_rcv+0x795/0x810 [ 3118.793827][ C0] __netif_receive_skb+0x265/0x670 [ 3118.798931][ C0] process_backlog+0x50d/0xba0 [ 3118.803686][ C0] napi_poll+0x43b/0xfd0 [ 3118.807921][ C0] net_rx_action+0x35c/0xd40 [ 3118.812501][ C0] __do_softirq+0x2ea/0x7f5 [ 3118.816984][ C0] [ 3118.819300][ C0] Uninit was stored to memory at: [ 3118.824320][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3118.830043][ C0] __msan_chain_origin+0x50/0x90 [ 3118.834980][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3118.839999][ C0] tcp_v4_conn_request+0x201/0x290 [ 3118.845103][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3118.850120][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3118.855494][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3118.860083][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3118.864578][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3118.870027][ C0] ip_local_deliver+0x727/0x8d0 [ 3118.874869][ C0] ip_rcv+0x795/0x810 [ 3118.878848][ C0] __netif_receive_skb+0x265/0x670 [ 3118.883949][ C0] process_backlog+0x50d/0xba0 [ 3118.888702][ C0] napi_poll+0x43b/0xfd0 [ 3118.892936][ C0] net_rx_action+0x35c/0xd40 [ 3118.897516][ C0] __do_softirq+0x2ea/0x7f5 [ 3118.901997][ C0] [ 3118.904309][ C0] Uninit was stored to memory at: [ 3118.909334][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3118.915047][ C0] __msan_chain_origin+0x50/0x90 [ 3118.919977][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3118.925251][ C0] tcp_conn_request+0x3046/0x4c30 [ 3118.930268][ C0] tcp_v4_conn_request+0x201/0x290 [ 3118.935406][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3118.940422][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3118.945801][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3118.950380][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3118.954872][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3118.960343][ C0] ip_local_deliver+0x727/0x8d0 [ 3118.965183][ C0] ip_rcv+0x795/0x810 [ 3118.969159][ C0] __netif_receive_skb+0x265/0x670 [ 3118.974259][ C0] process_backlog+0x50d/0xba0 [ 3118.979013][ C0] napi_poll+0x43b/0xfd0 [ 3118.983245][ C0] net_rx_action+0x35c/0xd40 [ 3118.987837][ C0] __do_softirq+0x2ea/0x7f5 [ 3118.992318][ C0] [ 3118.994629][ C0] Uninit was stored to memory at: [ 3118.999647][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3119.005357][ C0] __msan_chain_origin+0x50/0x90 [ 3119.010283][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3119.015295][ C0] tcp_v4_conn_request+0x201/0x290 [ 3119.020397][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3119.025408][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3119.030769][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3119.035347][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3119.039839][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3119.045285][ C0] ip_local_deliver+0x727/0x8d0 [ 3119.050123][ C0] ip_rcv+0x795/0x810 [ 3119.054100][ C0] __netif_receive_skb+0x265/0x670 [ 3119.059204][ C0] process_backlog+0x50d/0xba0 [ 3119.063955][ C0] napi_poll+0x43b/0xfd0 [ 3119.068187][ C0] net_rx_action+0x35c/0xd40 [ 3119.072765][ C0] __do_softirq+0x2ea/0x7f5 [ 3119.077263][ C0] [ 3119.079581][ C0] Uninit was stored to memory at: [ 3119.084611][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3119.090317][ C0] __msan_chain_origin+0x50/0x90 [ 3119.095245][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 3119.100520][ C0] tcp_conn_request+0x3046/0x4c30 [ 3119.105532][ C0] tcp_v4_conn_request+0x201/0x290 [ 3119.110633][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3119.115646][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3119.121010][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3119.125589][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3119.130080][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3119.135527][ C0] ip_local_deliver+0x727/0x8d0 [ 3119.140385][ C0] ip_rcv+0x795/0x810 [ 3119.144357][ C0] __netif_receive_skb+0x265/0x670 [ 3119.149473][ C0] process_backlog+0x50d/0xba0 [ 3119.154226][ C0] napi_poll+0x43b/0xfd0 [ 3119.158458][ C0] net_rx_action+0x35c/0xd40 [ 3119.163038][ C0] __do_softirq+0x2ea/0x7f5 [ 3119.167528][ C0] [ 3119.169839][ C0] Uninit was stored to memory at: [ 3119.174853][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3119.180560][ C0] __msan_chain_origin+0x50/0x90 [ 3119.185485][ C0] tcp_conn_request+0x19d6/0x4c30 [ 3119.190600][ C0] tcp_v4_conn_request+0x201/0x290 [ 3119.195701][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3119.200712][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3119.206071][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3119.210650][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3119.215146][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3119.220591][ C0] ip_local_deliver+0x727/0x8d0 [ 3119.225427][ C0] ip_rcv+0x795/0x810 [ 3119.229451][ C0] __netif_receive_skb+0x265/0x670 [ 3119.234567][ C0] process_backlog+0x50d/0xba0 [ 3119.239318][ C0] napi_poll+0x43b/0xfd0 [ 3119.243561][ C0] net_rx_action+0x35c/0xd40 [ 3119.248143][ C0] __do_softirq+0x2ea/0x7f5 [ 3119.252622][ C0] [ 3119.254934][ C0] Uninit was created at: [ 3119.259168][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 3119.264789][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 3119.269547][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 3119.275009][ C0] alloc_pages_current+0x685/0xb50 [ 3119.280108][ C0] alloc_slab_page+0x11c/0x1240 [ 3119.284950][ C0] new_slab+0x2bf/0x10c0 [ 3119.289182][ C0] ___slab_alloc+0xcd3/0x18a0 [ 3119.293849][ C0] kmem_cache_alloc+0xb70/0xc50 [ 3119.298689][ C0] inet_reqsk_alloc+0xaf/0x910 [ 3119.303440][ C0] tcp_conn_request+0x8dc/0x4c30 [ 3119.308370][ C0] tcp_v4_conn_request+0x201/0x290 [ 3119.313468][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 3119.318829][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3119.323408][ C0] tcp_v4_rcv+0x4ad1/0x5c10 [ 3119.327918][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3119.333376][ C0] ip_local_deliver+0x727/0x8d0 [ 3119.338319][ C0] ip_sublist_rcv+0x1389/0x1540 [ 3119.343160][ C0] ip_list_rcv+0x904/0x970 [ 3119.347569][ C0] __netif_receive_skb_list_core+0xeab/0x12b0 [ 3119.353626][ C0] __netif_receive_skb_list+0x818/0x990 [ 3119.359181][ C0] netif_receive_skb_list_internal+0xdfa/0xe20 [ 3119.365321][ C0] napi_complete_done+0x552/0xf90 [ 3119.370336][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 3119.375699][ C0] virtnet_poll+0x170f/0x1d10 [ 3119.380364][ C0] napi_poll+0x43b/0xfd0 [ 3119.384595][ C0] net_rx_action+0x35c/0xd40 [ 3119.389176][ C0] __do_softirq+0x2ea/0x7f5 [ 3119.496116][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3119.856792][T30066] usb 4-1: Using ep0 maxpacket: 16 09:19:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) 09:19:44 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x14) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)) 09:19:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) [ 3120.137723][T30066] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 3120.147407][T30066] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 3120.155885][T30066] usb 4-1: Product: syz [ 3120.160318][T30066] usb 4-1: Manufacturer: syz [ 3120.165058][T30066] usb 4-1: SerialNumber: syz [ 3120.215202][T30066] usb 4-1: config 0 descriptor?? [ 3120.268366][T30066] i2c-tiny-usb 4-1:0.0: version 63.ce found at bus 004 address 124 09:19:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) [ 3120.497717][T30066] (null): failure setting delay to 10us [ 3120.503730][T30066] i2c-tiny-usb: probe of 4-1:0.0 failed with error -5 [ 3120.548981][T30066] usb 4-1: USB disconnect, device number 124 [ 3120.608005][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3121.134197][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:45 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63ffff03010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 3121.520566][ T3695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3121.680957][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x25}, {0x7c}, {0x6}]}) 09:19:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) 09:19:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) [ 3121.828914][ T8693] usb 4-1: new high-speed USB device number 125 using dummy_hcd 09:19:46 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) [ 3122.083109][ T28] audit: type=1326 audit(1600161586.623:188): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6613 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3122.107578][ T8693] usb 4-1: Using ep0 maxpacket: 16 [ 3122.421320][ T8693] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 3122.430601][ T8693] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 3122.439206][ T8693] usb 4-1: Product: syz [ 3122.443516][ T8693] usb 4-1: Manufacturer: syz [ 3122.448354][ T8693] usb 4-1: SerialNumber: syz [ 3122.594489][ T8693] usb 4-1: config 0 descriptor?? 09:19:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 09:19:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) [ 3122.660607][ T8693] i2c-tiny-usb 4-1:0.0: version 63.ce found at bus 004 address 125 [ 3122.718781][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:47 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) [ 3122.856795][ T8693] (null): failure setting delay to 10us [ 3122.862821][ T8693] i2c-tiny-usb: probe of 4-1:0.0 failed with error -5 [ 3122.872628][ T28] audit: type=1326 audit(1600161587.413:189): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6613 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3122.940182][ T8693] usb 4-1: USB disconnect, device number 125 09:19:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x25}, {0x7c}, {0x6}]}) 09:19:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) 09:19:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 3123.420300][ T28] audit: type=1326 audit(1600161587.963:190): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 09:19:48 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000240)=@v2, 0x14, 0x0) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)=""/198, 0xfffffffffffffe76) [ 3123.763671][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x6, 0x4, 0x1f, 0x2}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000040)=ANY=[]}) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x30) 09:19:48 executing program 3: userfaultfd(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) unshare(0x8000400) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 09:19:48 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000240)=@v2, 0x14, 0x0) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)=""/198, 0xfffffffffffffe76) 09:19:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 3124.157660][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x25}, {0x7c}, {0x6}]}) 09:19:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x6, 0x4, 0x1f, 0x2}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000040)=ANY=[]}) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x30) 09:19:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x117}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 09:19:49 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000240)=@v2, 0x14, 0x0) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)=""/198, 0xfffffffffffffe76) 09:19:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 3124.798412][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3124.847064][ T28] audit: type=1326 audit(1600161589.383:191): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6661 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 09:19:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000001600)='./file0\x00', 0x0, 0x207a05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/112, 0x70) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) dup2(r3, r2) 09:19:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x6, 0x4, 0x1f, 0x2}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000040)=ANY=[]}) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x30) 09:19:49 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xb2) 09:19:49 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000240)=@v2, 0x14, 0x0) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)=""/198, 0xfffffffffffffe76) 09:19:50 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x6, 0x4, 0x1f, 0x2}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000040)=ANY=[]}) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x30) 09:19:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x25}, {0x7c}, {0x6}]}) [ 3125.894053][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:50 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xb2) 09:19:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, 0x0, 0xa6451776) splice(r2, 0x0, r4, 0x0, 0x4ff5d, 0x0) [ 3126.333625][ T28] audit: type=1326 audit(1600161590.873:192): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6688 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 09:19:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) [ 3126.957333][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3127.198753][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x117}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 09:19:52 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xb2) 09:19:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8d}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 09:19:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 09:19:52 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) 09:19:52 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='xfrm0\x00'}) [ 3128.008013][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3128.175027][ T6709] bond0: (slave xfrm0): ether type (65534) is different from other slaves (1), can not enslave it 09:19:52 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xb2) [ 3128.269850][ T6718] bond0: (slave xfrm0): ether type (65534) is different from other slaves (1), can not enslave it 09:19:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 09:19:53 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='xfrm0\x00'}) 09:19:53 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x0, 0x3}}) [ 3128.957219][ T6728] bond0: (slave xfrm0): ether type (65534) is different from other slaves (1), can not enslave it 09:19:53 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 09:19:53 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='xfrm0\x00'}) [ 3129.038211][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3129.350600][ T6736] bond0: (slave xfrm0): ether type (65534) is different from other slaves (1), can not enslave it [ 3130.086705][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3130.242849][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3131.117190][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3131.132713][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x117}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 09:19:55 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8d}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 09:19:55 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) 09:19:55 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x0, 0x3}}) 09:19:55 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='xfrm0\x00'}) 09:19:55 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8d}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 3131.556839][ T6751] bond0: (slave xfrm0): ether type (65534) is different from other slaves (1), can not enslave it 09:19:56 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x0, 0x3}}) 09:19:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup2(r1, r3) [ 3132.158307][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x0, 0x3}}) 09:19:57 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8d}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 09:19:57 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8d}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 09:19:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup2(r1, r3) [ 3133.197190][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3133.283281][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3134.237937][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="675f07000005eb301220000097f1ac1dea61a7a765760136f300000000007d7cff30f341089c28409259007607b4be9cf2840749a68af200000000800000009af7509a18771b61b8a971ca5aa77c06f83003d8f8ba48ac2f89ac97513616cad8944a033e60862f04f6f07e5e12eff930465c770c5ed7dcfa8893dcc45b90999b9f3ebee982dce535ffeb34b6553d1e702afa0cd5715ec4dcccb43dc2a799b62fcc6925c088d3ce15f89af81687e1d3565b0d6946ce5abdb19a9c9bc0cf1c78d1e1bc21c198db883e8503743344a2eeb3f7e452dcda97534ef7659bd114c8f1c9d3759d4c98276cc01d460ba65614e5915f8c729ad40f0b159818882aae0e3fe5dcd13bb742155727a7b06654f2ed17f26fd6eadf9f56b3", 0x117}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 09:19:59 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) 09:19:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup2(r1, r3) 09:19:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup2(r1, r3) 09:19:59 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8d}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 09:19:59 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8d}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 3135.278049][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:19:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup2(r1, r3) 09:19:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup2(r1, r3) 09:20:00 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) 09:20:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup2(r1, r3) 09:20:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x58}}, 0x0) [ 3136.322193][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3136.330627][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:01 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x4000001ff, 0x3}}) [ 3137.361675][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x9, 0x0, @opaque="ff"}}}}}, 0x0) 09:20:02 executing program 4: r0 = userfaultfd(0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000002b000/0x1000)=nil, 0x1000}, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xcc272, 0xffffffffffffffff, 0x0) 09:20:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x58}}, 0x0) 09:20:02 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file2\x00') 09:20:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 09:20:02 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x4000001ff, 0x3}}) [ 3138.403329][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:03 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x4000001ff, 0x3}}) 09:20:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x58}}, 0x0) 09:20:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 09:20:03 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file2\x00') 09:20:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x58}}, 0x0) 09:20:03 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x4000001ff, 0x3}}) [ 3139.357971][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3139.438097][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x9, 0x0, @opaque="ff"}}}}}, 0x0) 09:20:04 executing program 4: r0 = userfaultfd(0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000002b000/0x1000)=nil, 0x1000}, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xcc272, 0xffffffffffffffff, 0x0) 09:20:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 09:20:04 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file2\x00') 09:20:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x2271, &(0x7f0000000100)) 09:20:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x34}}, 0x0) 09:20:04 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file2\x00') 09:20:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 09:20:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x34}}, 0x0) [ 3140.476979][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x2271, &(0x7f0000000100)) [ 3140.755789][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3140.780258][T19311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3140.818829][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3140.870549][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:05 executing program 4: r0 = userfaultfd(0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000002b000/0x1000)=nil, 0x1000}, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xcc272, 0xffffffffffffffff, 0x0) 09:20:05 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0xa0}, {0x4}], 0x2, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) [ 3141.522151][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x9, 0x0, @opaque="ff"}}}}}, 0x0) 09:20:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 09:20:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x34}}, 0x0) 09:20:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x2271, &(0x7f0000000100)) 09:20:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x34}}, 0x0) 09:20:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x2271, &(0x7f0000000100)) [ 3142.395439][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:07 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0xa0}, {0x4}], 0x2, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 09:20:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 09:20:07 executing program 4: r0 = userfaultfd(0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000002b000/0x1000)=nil, 0x1000}, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xcc272, 0xffffffffffffffff, 0x0) 09:20:07 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x0) [ 3142.556448][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:07 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653f5ff00053c27bc339daa36394049b4aed12f0020001500ae47a825d86800278dcff47d010000805acf4f8f36460214432479aed75d492b41", 0x3a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 09:20:07 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x0) 09:20:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x9, 0x0, @opaque="ff"}}}}}, 0x0) 09:20:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 09:20:08 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x0) 09:20:08 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x0) 09:20:08 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0xa0}, {0x4}], 0x2, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 09:20:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 09:20:08 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047453, 0x0) 09:20:09 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000200)={0x0}) [ 3144.671610][ T9024] net_ratelimit: 1 callbacks suppressed [ 3144.671641][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3144.685061][ T6979] IPVS: ftp: loaded support on port[0] = 21 09:20:09 executing program 5: syz_emit_ethernet(0xba, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484060e0000000000000000000000000000aafe8000000000000000000000000000aa0420655800000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb000000002000000002"], 0x0) [ 3145.435807][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:10 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000331000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000001f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x0) [ 3145.501510][ T6981] IPVS: ftp: loaded support on port[0] = 21 [ 3145.694756][T27616] tipc: TX() has been purged, node left! [ 3145.720489][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653f5ff00053c27bc339daa36394049b4aed12f0020001500ae47a825d86800278dcff47d010000805acf4f8f36460214432479aed75d492b41", 0x3a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 09:20:10 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x4, 0xa0}, {0x4}], 0x2, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 09:20:10 executing program 5: syz_emit_ethernet(0xba, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484060e0000000000000000000000000000aafe8000000000000000000000000000aa0420655800000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb000000002000000002"], 0x0) 09:20:10 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000331000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000001f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x0) 09:20:10 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)=ANY=[@ANYBLOB="120100009504cf100819151300000102030109022400000000000009040000012787c5000905000000000000000904"], 0x0) 09:20:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 09:20:11 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000331000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000001f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x0) [ 3146.807607][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:11 executing program 5: syz_emit_ethernet(0xba, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484060e0000000000000000000000000000aafe8000000000000000000000000000aa0420655800000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb000000002000000002"], 0x0) 09:20:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) [ 3147.434548][T27548] usb 1-1: new high-speed USB device number 32 using dummy_hcd 09:20:12 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000331000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000001f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x0) 09:20:12 executing program 5: syz_emit_ethernet(0xba, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60352668004484060e0000000000000000000000000000aafe8000000000000000000000000000aa0420655800000000628bf289000086dd080088be0000000010000000010000000000264e6f240e9b18d667b02d0328cb9a0000080022eb000000002000000002"], 0x0) 09:20:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) [ 3147.677420][T27548] usb 1-1: Using ep0 maxpacket: 16 [ 3147.832169][T27548] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3147.835824][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3147.844859][T27548] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3147.865394][T27548] usb 1-1: config 0 has no interfaces? [ 3148.275083][T27548] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 3148.284316][T27548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3148.292465][T27548] usb 1-1: Product: syz [ 3148.296865][T27548] usb 1-1: Manufacturer: syz [ 3148.301550][T27548] usb 1-1: SerialNumber: syz [ 3148.373359][ C0] not chained 340000 origins [ 3148.378003][ C0] CPU: 0 PID: 5053 Comm: kworker/u4:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 3148.386431][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3148.396496][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 3148.402127][ C0] Call Trace: [ 3148.405406][ C0] [ 3148.408305][ C0] dump_stack+0x21c/0x280 [ 3148.412661][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 3148.418377][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.423565][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.428755][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3148.434554][ C0] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 3148.440706][ C0] ? ___slab_alloc+0x14ba/0x18a0 [ 3148.445637][ C0] ? inet_twsk_alloc+0x154/0xbd0 [ 3148.450573][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.455766][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.460956][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3148.466753][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3148.472809][ C0] ? kmem_cache_alloc+0x166/0xc50 [ 3148.477847][ C0] ? inet_twsk_alloc+0x154/0xbd0 [ 3148.482794][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.487985][ C0] __msan_chain_origin+0x50/0x90 [ 3148.492916][ C0] inet_twsk_alloc+0xac7/0xbd0 [ 3148.497680][ C0] tcp_time_wait+0xd9/0x1150 [ 3148.502270][ C0] ? tcp_send_ack+0x68/0x90 [ 3148.506783][ C0] tcp_fin+0x23a/0x9f0 [ 3148.510847][ C0] tcp_data_queue+0x1e5c/0xb570 [ 3148.515695][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3148.521506][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 3148.527576][ C0] ? tcp_urg+0xb22/0x10c0 [ 3148.531929][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 3148.537379][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3148.543176][ C0] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 3148.549243][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.554447][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.559649][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3148.564233][ C0] ? kmsan_set_origin_checked+0x20/0xf0 [ 3148.569779][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3148.574276][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.579588][ C0] ? tcp_v4_rcv+0x1801/0x5c10 [ 3148.584262][ C0] ? tcp_filter+0xf0/0xf0 [ 3148.588585][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3148.594051][ C0] ip_local_deliver+0x727/0x8d0 [ 3148.598902][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 3148.603922][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3148.609546][ C0] ip_rcv+0x795/0x810 [ 3148.613530][ C0] ? ip_rcv_core+0x1490/0x1490 [ 3148.618290][ C0] __netif_receive_skb+0x265/0x670 [ 3148.623391][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 3148.628928][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 3148.634559][ C0] process_backlog+0x50d/0xba0 [ 3148.639323][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3148.645127][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3148.650408][ C0] napi_poll+0x43b/0xfd0 [ 3148.654656][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.659863][ C0] net_rx_action+0x35c/0xd40 [ 3148.664455][ C0] ? net_tx_action+0xdc0/0xdc0 [ 3148.669218][ C0] __do_softirq+0x2ea/0x7f5 [ 3148.673722][ C0] asm_call_on_stack+0xf/0x20 [ 3148.678382][ C0] [ 3148.681316][ C0] do_softirq_own_stack+0x7c/0xa0 [ 3148.686347][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 3148.691542][ C0] local_bh_enable+0x36/0x40 [ 3148.696125][ C0] ip_finish_output2+0x2459/0x2930 [ 3148.701229][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 3148.706953][ C0] ? nf_ct_deliver_cached_events+0x52f/0x7e0 [ 3148.712925][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.718137][ C0] __ip_finish_output+0xeb5/0xfd0 [ 3148.723175][ C0] ip_finish_output+0x14b/0x4b0 [ 3148.728034][ C0] ip_output+0x5f2/0x6e0 [ 3148.732281][ C0] ? ip_mc_finish_output+0x780/0x780 [ 3148.737664][ C0] ? ip_finish_output+0x4b0/0x4b0 [ 3148.742679][ C0] __ip_queue_xmit+0x1eac/0x23c0 [ 3148.747610][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.752819][ C0] ip_queue_xmit+0xcc/0xf0 [ 3148.757232][ C0] ? tcp_v6_send_response+0x2c20/0x2c20 [ 3148.762770][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 3148.768009][ C0] tcp_write_xmit+0x4f5b/0xe6a0 [ 3148.772896][ C0] ? __do_softirq+0x7f5/0x7f5 [ 3148.777570][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.782766][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.787962][ C0] __tcp_push_pending_frames+0x150/0x5c0 [ 3148.793593][ C0] tcp_send_fin+0x192a/0x1bc0 [ 3148.798271][ C0] ? tcp_set_state+0x9ec/0xb40 [ 3148.803032][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.808227][ C0] tcp_shutdown+0x1f7/0x270 [ 3148.812726][ C0] ? tcp_set_state+0xb40/0xb40 [ 3148.817489][ C0] inet_shutdown+0x44f/0x6d0 [ 3148.822079][ C0] ? inet_recvmsg+0x6b0/0x6b0 [ 3148.826748][ C0] kernel_sock_shutdown+0x98/0xc0 [ 3148.831769][ C0] rds_tcp_accept_one+0x1060/0x12c0 [ 3148.836968][ C0] rds_tcp_accept_worker+0x60/0x180 [ 3148.842160][ C0] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 3148.847194][ C0] process_one_work+0x1688/0x2140 [ 3148.852228][ C0] worker_thread+0x10bc/0x2730 [ 3148.856987][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3148.862190][ C0] kthread+0x551/0x590 [ 3148.866253][ C0] ? process_one_work+0x2140/0x2140 [ 3148.871446][ C0] ? kthread_blkcg+0x110/0x110 [ 3148.876207][ C0] ret_from_fork+0x1f/0x30 [ 3148.880614][ C0] Uninit was stored to memory at: [ 3148.885631][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3148.891339][ C0] __msan_chain_origin+0x50/0x90 [ 3148.896266][ C0] inet_twsk_alloc+0xac7/0xbd0 [ 3148.901020][ C0] tcp_time_wait+0xd9/0x1150 [ 3148.905597][ C0] tcp_fin+0x23a/0x9f0 [ 3148.909693][ C0] tcp_data_queue+0x1e5c/0xb570 [ 3148.914531][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 3148.919978][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3148.924555][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3148.929049][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3148.934510][ C0] ip_local_deliver+0x727/0x8d0 [ 3148.939348][ C0] ip_rcv+0x795/0x810 [ 3148.943318][ C0] __netif_receive_skb+0x265/0x670 [ 3148.948416][ C0] process_backlog+0x50d/0xba0 [ 3148.953168][ C0] napi_poll+0x43b/0xfd0 [ 3148.957400][ C0] net_rx_action+0x35c/0xd40 [ 3148.962101][ C0] __do_softirq+0x2ea/0x7f5 [ 3148.966583][ C0] [ 3148.968893][ C0] Uninit was stored to memory at: [ 3148.973924][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3148.979639][ C0] __msan_chain_origin+0x50/0x90 [ 3148.984586][ C0] inet_twsk_alloc+0xac7/0xbd0 [ 3148.989337][ C0] tcp_time_wait+0xd9/0x1150 [ 3148.993913][ C0] tcp_fin+0x23a/0x9f0 [ 3148.997970][ C0] tcp_data_queue+0x1e5c/0xb570 [ 3149.002809][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 3149.008279][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3149.012860][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3149.017352][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3149.022797][ C0] ip_local_deliver+0x727/0x8d0 [ 3149.027634][ C0] ip_rcv+0x795/0x810 [ 3149.031609][ C0] __netif_receive_skb+0x265/0x670 [ 3149.036727][ C0] process_backlog+0x50d/0xba0 [ 3149.041569][ C0] napi_poll+0x43b/0xfd0 [ 3149.045803][ C0] net_rx_action+0x35c/0xd40 [ 3149.050381][ C0] __do_softirq+0x2ea/0x7f5 [ 3149.054885][ C0] [ 3149.057198][ C0] Uninit was stored to memory at: [ 3149.062212][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3149.067919][ C0] __msan_chain_origin+0x50/0x90 [ 3149.072846][ C0] inet_twsk_alloc+0xac7/0xbd0 [ 3149.077617][ C0] tcp_time_wait+0xd9/0x1150 [ 3149.082193][ C0] tcp_fin+0x23a/0x9f0 [ 3149.086252][ C0] tcp_data_queue+0x1e5c/0xb570 [ 3149.091090][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 3149.096538][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3149.101117][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3149.105608][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3149.111054][ C0] ip_local_deliver+0x727/0x8d0 [ 3149.115892][ C0] ip_rcv+0x795/0x810 [ 3149.119861][ C0] __netif_receive_skb+0x265/0x670 [ 3149.124959][ C0] process_backlog+0x50d/0xba0 [ 3149.129710][ C0] napi_poll+0x43b/0xfd0 [ 3149.133952][ C0] net_rx_action+0x35c/0xd40 [ 3149.138535][ C0] __do_softirq+0x2ea/0x7f5 [ 3149.143016][ C0] [ 3149.145336][ C0] Uninit was stored to memory at: [ 3149.150355][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3149.156078][ C0] __msan_chain_origin+0x50/0x90 [ 3149.161003][ C0] inet_twsk_alloc+0xac7/0xbd0 [ 3149.165755][ C0] tcp_time_wait+0xd9/0x1150 [ 3149.170337][ C0] tcp_fin+0x23a/0x9f0 [ 3149.174392][ C0] tcp_data_queue+0x1e5c/0xb570 [ 3149.179230][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 3149.184676][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3149.189254][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3149.193746][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3149.199193][ C0] ip_local_deliver+0x727/0x8d0 [ 3149.204031][ C0] ip_rcv+0x795/0x810 [ 3149.208004][ C0] __netif_receive_skb+0x265/0x670 [ 3149.213116][ C0] process_backlog+0x50d/0xba0 [ 3149.217868][ C0] napi_poll+0x43b/0xfd0 [ 3149.222100][ C0] net_rx_action+0x35c/0xd40 [ 3149.226679][ C0] __do_softirq+0x2ea/0x7f5 [ 3149.231159][ C0] [ 3149.233470][ C0] Uninit was stored to memory at: [ 3149.238485][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3149.244195][ C0] __msan_chain_origin+0x50/0x90 [ 3149.249124][ C0] inet_twsk_alloc+0xac7/0xbd0 [ 3149.253979][ C0] tcp_time_wait+0xd9/0x1150 [ 3149.258561][ C0] tcp_fin+0x23a/0x9f0 [ 3149.262617][ C0] tcp_data_queue+0x1e5c/0xb570 [ 3149.267458][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 3149.272921][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3149.277587][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3149.282078][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3149.287522][ C0] ip_local_deliver+0x727/0x8d0 [ 3149.292361][ C0] ip_rcv+0x795/0x810 [ 3149.296332][ C0] __netif_receive_skb+0x265/0x670 [ 3149.301538][ C0] process_backlog+0x50d/0xba0 [ 3149.306292][ C0] napi_poll+0x43b/0xfd0 [ 3149.310525][ C0] net_rx_action+0x35c/0xd40 [ 3149.315102][ C0] __do_softirq+0x2ea/0x7f5 [ 3149.319588][ C0] [ 3149.321901][ C0] Uninit was stored to memory at: [ 3149.326915][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3149.332623][ C0] __msan_chain_origin+0x50/0x90 [ 3149.337549][ C0] inet_twsk_alloc+0xac7/0xbd0 [ 3149.342303][ C0] tcp_time_wait+0xd9/0x1150 [ 3149.346882][ C0] tcp_fin+0x23a/0x9f0 [ 3149.350939][ C0] tcp_data_queue+0x1e5c/0xb570 [ 3149.355779][ C0] tcp_rcv_state_process+0x2e24/0x45b0 [ 3149.361228][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3149.365807][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3149.370307][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3149.375772][ C0] ip_local_deliver+0x727/0x8d0 [ 3149.380610][ C0] ip_rcv+0x795/0x810 [ 3149.384587][ C0] __netif_receive_skb+0x265/0x670 [ 3149.389687][ C0] process_backlog+0x50d/0xba0 [ 3149.394443][ C0] napi_poll+0x43b/0xfd0 [ 3149.398688][ C0] net_rx_action+0x35c/0xd40 [ 3149.403265][ C0] __do_softirq+0x2ea/0x7f5 [ 3149.407746][ C0] [ 3149.410065][ C0] Uninit was stored to memory at: [ 3149.415079][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3149.420784][ C0] __msan_chain_origin+0x50/0x90 [ 3149.425709][ C0] inet_twsk_alloc+0xac7/0xbd0 [ 3149.430467][ C0] tcp_time_wait+0xd9/0x1150 [ 3149.435045][ C0] tcp_rcv_state_process+0xf6e/0x45b0 [ 3149.440426][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3149.445005][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3149.449496][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3149.454944][ C0] ip_local_deliver+0x727/0x8d0 [ 3149.459782][ C0] ip_rcv+0x795/0x810 [ 3149.463767][ C0] __netif_receive_skb+0x265/0x670 [ 3149.468879][ C0] process_backlog+0x50d/0xba0 [ 3149.473633][ C0] napi_poll+0x43b/0xfd0 [ 3149.477867][ C0] net_rx_action+0x35c/0xd40 [ 3149.482462][ C0] __do_softirq+0x2ea/0x7f5 [ 3149.486942][ C0] [ 3149.489253][ C0] Uninit was created at: [ 3149.493602][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 3149.499223][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 3149.503982][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 3149.509430][ C0] alloc_pages_current+0x685/0xb50 [ 3149.514527][ C0] alloc_slab_page+0x11c/0x1240 [ 3149.519365][ C0] new_slab+0x2bf/0x10c0 [ 3149.523595][ C0] ___slab_alloc+0xcd3/0x18a0 [ 3149.528262][ C0] kmem_cache_alloc+0xb70/0xc50 [ 3149.533117][ C0] inet_twsk_alloc+0x154/0xbd0 [ 3149.537870][ C0] tcp_time_wait+0xd9/0x1150 [ 3149.542448][ C0] tcp_rcv_state_process+0xf6e/0x45b0 [ 3149.547936][ C0] tcp_v4_do_rcv+0xbfc/0xff0 [ 3149.552529][ C0] tcp_v4_rcv+0x57d0/0x5c10 [ 3149.557033][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3149.562481][ C0] ip_local_deliver+0x727/0x8d0 [ 3149.567343][ C0] ip_rcv+0x795/0x810 [ 3149.571318][ C0] __netif_receive_skb+0x265/0x670 [ 3149.576421][ C0] process_backlog+0x50d/0xba0 [ 3149.581173][ C0] napi_poll+0x43b/0xfd0 [ 3149.585412][ C0] net_rx_action+0x35c/0xd40 [ 3149.589993][ C0] __do_softirq+0x2ea/0x7f5 [ 3149.709962][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3149.718949][T27548] usb 1-1: config 0 descriptor?? [ 3149.726227][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653f5ff00053c27bc339daa36394049b4aed12f0020001500ae47a825d86800278dcff47d010000805acf4f8f36460214432479aed75d492b41", 0x3a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 09:20:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 09:20:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 09:20:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) [ 3149.973458][T30066] usb 1-1: USB disconnect, device number 32 [ 3150.343574][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3150.718304][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3150.827927][T30066] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 3151.192111][T30066] usb 1-1: Using ep0 maxpacket: 16 [ 3151.315360][T30066] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3151.328145][T30066] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3151.340908][T30066] usb 1-1: config 0 has no interfaces? [ 3151.395631][T27616] tipc: TX() has been purged, node left! [ 3151.827053][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:16 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)=ANY=[@ANYBLOB="120100009504cf100819151300000102030109022400000000000009040000012787c5000905000000000000000904"], 0x0) 09:20:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 09:20:16 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$nbd(r0, &(0x7f0000000300)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xc62) 09:20:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 09:20:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) [ 3151.994196][T30066] usb 1-1: string descriptor 0 read error: -71 [ 3152.000664][T30066] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 3152.010186][T30066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3152.134798][T30066] usb 1-1: config 0 descriptor?? [ 3152.232852][T30066] usb 1-1: can't set config #0, error -71 [ 3152.305057][T30066] usb 1-1: USB disconnect, device number 33 09:20:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x3f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)='$', 0x1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 09:20:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) 09:20:17 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) [ 3152.812374][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3152.892819][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3153.354027][ T5015] usb 1-1: new high-speed USB device number 34 using dummy_hcd 09:20:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653f5ff00053c27bc339daa36394049b4aed12f0020001500ae47a825d86800278dcff47d010000805acf4f8f36460214432479aed75d492b41", 0x3a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 09:20:18 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$nbd(r0, &(0x7f0000000300)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xc62) 09:20:18 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 09:20:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x40}}, 0x0) [ 3153.626477][ T5015] usb 1-1: Using ep0 maxpacket: 16 [ 3153.744966][ T5015] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3153.763098][ T5015] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3153.775810][ T5015] usb 1-1: config 0 has no interfaces? [ 3153.923544][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3154.129005][ T5015] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 3154.138748][ T5015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.147009][ T5015] usb 1-1: Product: syz [ 3154.151295][ T5015] usb 1-1: Manufacturer: syz [ 3154.156121][ T5015] usb 1-1: SerialNumber: syz [ 3154.308504][ T5015] usb 1-1: config 0 descriptor?? [ 3154.574958][ T5015] usb 1-1: USB disconnect, device number 34 [ 3154.962821][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:20 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)=ANY=[@ANYBLOB="120100009504cf100819151300000102030109022400000000000009040000012787c5000905000000000000000904"], 0x0) 09:20:20 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x8000003) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="a0f431bd879a7599545699107d3fd3809a4acd191432dfff54d18357852e93a038260a6ada6215db7fbe56922f8e98735608235ca5c216866633d52d", 0x3c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 09:20:20 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 09:20:20 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000006c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000e802000030010000300100003001000000000000000000001802000018020000180200001802000018020000030000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007465716c3000000000000000000000006966623000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800300100000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000000000000000736e6d7000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000006c6f0000000000000000000000000000766c616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a700d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000f23d16db95d8c0e55c1143ee475b9d3164736495edcb2da215eb00000000000000"], 0x348) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f00000006c0)=0x10) 09:20:20 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$nbd(r0, &(0x7f0000000300)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xc62) 09:20:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x40}}, 0x0) [ 3155.852350][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3155.998241][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:20 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 09:20:20 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000006c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000e802000030010000300100003001000000000000000000001802000018020000180200001802000018020000030000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007465716c3000000000000000000000006966623000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800300100000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000000000000000736e6d7000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000006c6f0000000000000000000000000000766c616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a700d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000f23d16db95d8c0e55c1143ee475b9d3164736495edcb2da215eb00000000000000"], 0x348) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f00000006c0)=0x10) 09:20:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x40}}, 0x0) 09:20:20 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$nbd(r0, &(0x7f0000000300)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xc62) 09:20:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1d, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0x10c, 0x52020000}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x314) 09:20:21 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000006c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000e802000030010000300100003001000000000000000000001802000018020000180200001802000018020000030000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007465716c3000000000000000000000006966623000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800300100000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000000000000000736e6d7000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000006c6f0000000000000000000000000000766c616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a700d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000f23d16db95d8c0e55c1143ee475b9d3164736495edcb2da215eb00000000000000"], 0x348) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f00000006c0)=0x10) [ 3157.035976][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3157.214504][T27549] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3157.455982][T27549] usb 1-1: Using ep0 maxpacket: 16 [ 3157.573998][T27549] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3157.586744][T27549] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3157.599652][T27549] usb 1-1: config 0 has no interfaces? [ 3157.774483][T27549] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 3157.784045][T27549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3157.792231][T27549] usb 1-1: Product: syz [ 3157.796876][T27549] usb 1-1: Manufacturer: syz [ 3157.801557][T27549] usb 1-1: SerialNumber: syz [ 3157.880831][T27549] usb 1-1: config 0 descriptor?? [ 3158.075659][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3158.188234][ T5015] usb 1-1: USB disconnect, device number 35 09:20:23 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000002b40)=ANY=[@ANYBLOB="120100009504cf100819151300000102030109022400000000000009040000012787c5000905000000000000000904"], 0x0) 09:20:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r2, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3e}}]}, 0x40}}, 0x0) 09:20:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x40}}, 0x0) 09:20:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/113) 09:20:23 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0xfffffff9}) 09:20:23 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000006c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000e802000030010000300100003001000000000000000000001802000018020000180200001802000018020000030000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007465716c3000000000000000000000006966623000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800300100000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000000000000000736e6d7000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000006c6f0000000000000000000000000000766c616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a700d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000f23d16db95d8c0e55c1143ee475b9d3164736495edcb2da215eb00000000000000"], 0x348) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f00000006c0)=0x10) [ 3158.875097][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3159.115820][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:23 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x64}, {0x4}, {0x6}]}) 09:20:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="580000001400379b9fb61b47", 0xc}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0xa) bind(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x0, @remote}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 09:20:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r2, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3e}}]}, 0x40}}, 0x0) 09:20:23 executing program 5: r0 = socket(0x800000002b, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="72617700000000007d0000000000010000090010c7ff40010000f7ff120061060000ffffffffffffffff60020000ffffffff030000000000000000000000000000000000218d436348f960130c6bab7d66b6f5c7ee8ff220"], 0x1) 09:20:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@remote}}]}, 0x154}}, 0x0) [ 3159.926051][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3160.120105][ T28] audit: type=1326 audit(1600161624.656:193): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7207 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3160.156337][T16699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:24 executing program 5: r0 = socket(0x800000002b, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="72617700000000007d0000000000010000090010c7ff40010000f7ff120061060000ffffffffffffffff60020000ffffffff030000000000000000000000000000000000218d436348f960130c6bab7d66b6f5c7ee8ff220"], 0x1) [ 3160.173927][T30066] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 3160.381991][ T28] audit: type=1326 audit(1600161624.916:194): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7207 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3160.443409][T30066] usb 1-1: Using ep0 maxpacket: 16 [ 3160.570410][T30066] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3160.583348][T30066] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3160.596018][T30066] usb 1-1: config 0 has no interfaces? [ 3160.838023][T30066] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 3160.847467][T30066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3160.855764][T30066] usb 1-1: Product: syz [ 3160.860057][T30066] usb 1-1: Manufacturer: syz [ 3160.864863][T30066] usb 1-1: SerialNumber: syz [ 3160.940092][T30066] usb 1-1: config 0 descriptor?? [ 3161.225447][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.245692][ T5015] usb 1-1: USB disconnect, device number 36 09:20:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@remote}}]}, 0x154}}, 0x0) 09:20:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r2, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3e}}]}, 0x40}}, 0x0) 09:20:26 executing program 5: r0 = socket(0x800000002b, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="72617700000000007d0000000000010000090010c7ff40010000f7ff120061060000ffffffffffffffff60020000ffffffff030000000000000000000000000000000000218d436348f960130c6bab7d66b6f5c7ee8ff220"], 0x1) 09:20:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00'}, {@in6=@mcast2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0) 09:20:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x64}, {0x4}, {0x6}]}) [ 3161.914844][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3162.094480][ T28] audit: type=1326 audit(1600161626.626:195): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7240 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3162.234810][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01000000000000000000000000000500000001000000000094332d6e00000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2a, 0x0, 0x0) 09:20:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@remote}}]}, 0x154}}, 0x0) 09:20:27 executing program 5: r0 = socket(0x800000002b, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="72617700000000007d0000000000010000090010c7ff40010000f7ff120061060000ffffffffffffffff60020000ffffffff030000000000000000000000000000000000218d436348f960130c6bab7d66b6f5c7ee8ff220"], 0x1) 09:20:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r2, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3e}}]}, 0x40}}, 0x0) 09:20:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {0x35}, {0x6}]}) [ 3162.920030][ T28] audit: type=1326 audit(1600161627.456:196): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7261 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 09:20:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x64}, {0x4}, {0x6}]}) 09:20:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newsa={0x154, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast1}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@remote}}]}, 0x154}}, 0x0) 09:20:27 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x40}}, 0x0) [ 3163.280646][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) [ 3163.409641][ T28] audit: type=1326 audit(1600161627.946:197): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7274 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3163.672168][ T28] audit: type=1326 audit(1600161628.206:198): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7261 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 09:20:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) dup3(r1, r2, 0x80000) 09:20:28 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x40}}, 0x0) 09:20:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {0x35}, {0x6}]}) 09:20:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01000000000000000000000000000500000001000000000094332d6e00000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2a, 0x0, 0x0) [ 3164.285755][ T28] audit: type=1326 audit(1600161628.826:199): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3164.315394][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x64}, {0x4}, {0x6}]}) 09:20:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) dup3(r1, r2, 0x80000) 09:20:29 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x40}}, 0x0) 09:20:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400000000ff01000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r10], 0x20}, 0x1, 0x74}, 0x0) [ 3164.640126][ T28] audit: type=1326 audit(1600161629.176:200): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3164.960217][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3164.995531][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3165.005237][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3165.146864][ T7308] batman_adv: batadv0: Adding interface: ipvlan7 [ 3165.154451][ T7308] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3165.179946][ T7308] batman_adv: batadv0: Not using interface ipvlan7 (retrying later): interface not active [ 3165.265152][ T7311] batman_adv: batadv0: Removing interface: ipvlan7 09:20:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) dup3(r1, r2, 0x80000) 09:20:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {0x35}, {0x6}]}) [ 3165.358321][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:29 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x40}}, 0x0) [ 3165.568539][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3165.578174][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3165.624876][ T28] audit: type=1326 audit(1600161630.166:201): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7320 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3165.678389][ T7303] batman_adv: batadv0: Adding interface: ipvlan7 [ 3165.685045][ T7303] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3165.710625][ T7303] batman_adv: batadv0: Not using interface ipvlan7 (retrying later): interface not active 09:20:30 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x90ff20, 0x1, 0x11, r0, 0x40000) 09:20:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) dup3(r1, r2, 0x80000) 09:20:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 3166.394913][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400000000ff01000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r10], 0x20}, 0x1, 0x74}, 0x0) 09:20:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01000000000000000000000000000500000001000000000094332d6e00000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2a, 0x0, 0x0) 09:20:31 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x90ff20, 0x1, 0x11, r0, 0x40000) 09:20:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {0x35}, {0x6}]}) 09:20:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x20) 09:20:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 3166.825640][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3166.835604][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3166.945666][ T7353] batman_adv: batadv0: Adding interface: ipvlan8 [ 3166.952146][ T7353] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3166.977682][ T7353] batman_adv: batadv0: Not using interface ipvlan8 (retrying later): interface not active [ 3167.029397][ T28] audit: type=1326 audit(1600161631.566:202): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7354 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 3167.080731][ T7358] batman_adv: batadv0: Removing interface: ipvlan8 09:20:31 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x90ff20, 0x1, 0x11, r0, 0x40000) 09:20:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x20) [ 3167.434908][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 09:20:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400000000ff01000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r10], 0x20}, 0x1, 0x74}, 0x0) 09:20:32 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x90ff20, 0x1, 0x11, r0, 0x40000) [ 3168.000204][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x20) [ 3168.109942][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3168.119815][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 09:20:32 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 3168.475481][T30066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01000000000000000000000000000500000001000000000094332d6e00000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2a, 0x0, 0x0) 09:20:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 09:20:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000000000)={0x23, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0}) 09:20:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400000000ff01000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r10], 0x20}, 0x1, 0x74}, 0x0) 09:20:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x20) 09:20:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 3169.012466][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3169.021943][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3169.134133][ T7417] batman_adv: batadv0: Adding interface: ipvlan8 [ 3169.140702][ T7417] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3169.166343][ T7417] batman_adv: batadv0: Not using interface ipvlan8 (retrying later): interface not active [ 3169.258160][ T7423] batman_adv: batadv0: Removing interface: ipvlan8 09:20:34 executing program 3: unshare(0x20000400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4141, 0x0) 09:20:34 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @empty, @val={@void, {0x8035}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "815c34", 0x8, 0x3a, 0x0, @mcast1, @remote, {[], @mlv2_report}}}}}, 0x0) 09:20:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) [ 3169.530307][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3169.538739][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 3170.006184][ T7437] __nla_validate_parse: 1 callbacks suppressed [ 3170.006221][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:20:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 3170.258818][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:20:34 executing program 3: unshare(0x20000400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4141, 0x0) [ 3170.554376][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 09:20:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 09:20:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) 09:20:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) 09:20:35 executing program 3: unshare(0x20000400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4141, 0x0) 09:20:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x0) [ 3171.033356][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3171.075968][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3171.090816][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3171.134857][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3171.172178][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:20:36 executing program 3: unshare(0x20000400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4141, 0x0) 09:20:36 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {}, 0x100002}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x100002, 0x2}}, 0x2e) 09:20:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) 09:20:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) [ 3171.594018][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) [ 3171.830661][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3171.889137][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:20:36 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)='D', 0x1) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) [ 3171.945100][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3172.021219][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:20:36 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {}, 0x100002}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x100002, 0x2}}, 0x2e) 09:20:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) 09:20:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) [ 3172.636427][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 09:20:37 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {}, 0x100002}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x100002, 0x2}}, 0x2e) 09:20:37 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)='D', 0x1) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 09:20:37 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x17, 0x0, &(0x7f0000000140)) 09:20:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 09:20:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) 09:20:37 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r8, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x800000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x90) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 09:20:37 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {}, 0x100002}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x100002, 0x2}}, 0x2e) [ 3173.455567][ C0] sd 0:0:1:0: [sg0] tag#6194 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3173.466312][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB: Test Unit Ready [ 3173.473106][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.482954][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.492809][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.502715][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.512649][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.522493][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.532328][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.542088][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.551935][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.561779][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.571628][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.581474][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3173.591310][ C0] sd 0:0:1:0: [sg0] tag#6194 CDB[c0]: 00 00 00 00 00 00 00 00 09:20:38 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)='D', 0x1) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) [ 3173.678651][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3173.687873][ T5015] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3173.942446][ T5015] usb 3-1: Using ep0 maxpacket: 16 09:20:38 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r8, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x800000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x90) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 3174.065212][ T5015] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3174.262599][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3174.284370][ T5015] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 3174.293659][ T5015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3174.301816][ T5015] usb 3-1: Product: syz [ 3174.306263][ T5015] usb 3-1: Manufacturer: syz [ 3174.310998][ T5015] usb 3-1: SerialNumber: syz 09:20:38 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r8, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x800000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x90) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 09:20:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1) 09:20:39 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)='D', 0x1) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) [ 3174.644071][ C0] sd 0:0:1:0: [sg0] tag#6195 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3174.654736][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB: Test Unit Ready [ 3174.661397][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.671349][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.681248][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.691139][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.700987][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.710828][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.715881][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3174.720637][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.738455][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.748314][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.758150][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.767992][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.777830][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.787666][ C0] sd 0:0:1:0: [sg0] tag#6195 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3174.809825][ C1] sd 0:0:1:0: [sg0] tag#6196 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3174.820572][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB: Test Unit Ready [ 3174.827361][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.837283][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.847216][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.857179][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.867104][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.877057][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.886981][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.896926][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.906854][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.916762][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.926758][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.936661][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3174.946557][ C1] sd 0:0:1:0: [sg0] tag#6196 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3175.399233][ T5015] usbhid 3-1:1.0: couldn't find an input interrupt endpoint 09:20:40 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r8, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x800000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x90) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 3175.581185][ T8693] usb 3-1: USB disconnect, device number 114 09:20:40 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r8, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x800000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x90) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 3175.761018][ T5015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3175.821941][ C0] sd 0:0:1:0: [sg0] tag#6198 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3175.832724][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB: Test Unit Ready [ 3175.839470][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.849459][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.859400][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.869381][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.879283][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.889193][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.899122][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.909046][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.918946][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.928869][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.938794][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.948716][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3175.958620][ C0] sd 0:0:1:0: [sg0] tag#6198 CDB[c0]: 00 00 00 00 00 00 00 00 09:20:40 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r8, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x800000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x90) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 09:20:40 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad9", 0x9}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r2, 0x0, r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x90, {0x2}, 0x75ed3fb0e63d9cd5, r8, 0x0, 0x9, 0x2, 0x80000001, 0x9000000000000000, 0xe0, 0x7, 0x1ff, 0x2, 0xd4, 0x7e, 0x800000000001000, 0xa7, 0x8510, 0x20, 0x5}}, 0xa0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x800000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x90) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 3176.291694][ C1] sd 0:0:1:0: [sg0] tag#6199 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3176.302364][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB: Test Unit Ready [ 3176.309020][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.318937][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.328803][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.338690][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.348560][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.358426][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.368288][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.378154][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.388015][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.397890][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.407764][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.417649][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.427514][ C1] sd 0:0:1:0: [sg0] tag#6199 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3176.502287][ T8693] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3176.774158][ C1] sd 0:0:1:0: [sg0] tag#6200 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3176.784839][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB: Test Unit Ready [ 3176.791489][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.792418][ T8693] usb 3-1: Using ep0 maxpacket: 16 [ 3176.801380][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.816195][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.826142][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.835999][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.845858][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.855707][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.865579][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.875446][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.885312][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.895169][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.905025][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3176.914877][ C1] sd 0:0:1:0: [sg0] tag#6200 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3176.943793][ T8693] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3177.143630][ T8693] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 3177.152994][ T8693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3177.161126][ T8693] usb 3-1: Product: syz [ 3177.165609][ T8693] usb 3-1: Manufacturer: syz [ 3177.170340][ T8693] usb 3-1: SerialNumber: syz [ 3177.278109][T27548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3177.331309][ C1] ===================================================== [ 3177.338323][ C1] BUG: KMSAN: uninit-value in update_stack_state+0x974/0xb40 [ 3177.345693][ C1] CPU: 1 PID: 4868 Comm: systemd-udevd Not tainted 5.8.0-rc5-syzkaller #0 [ 3177.354174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3177.364239][ C1] Call Trace: [ 3177.367530][ C1] [ 3177.370384][ C1] dump_stack+0x21c/0x280 [ 3177.374736][ C1] kmsan_report+0xf7/0x1e0 [ 3177.379148][ C1] __msan_warning+0x58/0xa0 [ 3177.383646][ C1] update_stack_state+0x974/0xb40 [ 3177.388694][ C1] unwind_next_frame+0x8c6/0xed0 [ 3177.393627][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3177.399434][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 3177.405582][ C1] arch_stack_walk+0x338/0x3d0 [ 3177.410339][ C1] ? stack_trace_save+0x1a0/0x1a0 [ 3177.415361][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 3177.421507][ C1] stack_trace_save+0x117/0x1a0 [ 3177.426357][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3177.432070][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3177.437263][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 3177.443146][ C1] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 3177.449288][ C1] ? kmsan_memcpy_metadata+0xb/0x10 [ 3177.454479][ C1] ? __msan_memcpy+0x43/0x50 [ 3177.459116][ C1] ? sctp_init_addrs+0x91/0xf0 [ 3177.463902][ C1] ? sctp_rcv+0x4e92/0x6120 [ 3177.468398][ C1] ? ip_protocol_deliver_rcu+0x572/0xc50 [ 3177.474020][ C1] ? ip_local_deliver+0x727/0x8d0 [ 3177.479050][ C1] ? ip_rcv+0x795/0x810 [ 3177.483199][ C1] ? __netif_receive_skb+0x265/0x670 [ 3177.488477][ C1] ? process_backlog+0x50d/0xba0 [ 3177.493405][ C1] ? napi_poll+0x43b/0xfd0 [ 3177.497811][ C1] ? net_rx_action+0x35c/0xd40 [ 3177.502568][ C1] ? __do_softirq+0x2ea/0x7f5 [ 3177.507322][ C1] ? asm_call_on_stack+0xf/0x20 [ 3177.512165][ C1] ? do_softirq_own_stack+0x7c/0xa0 [ 3177.517353][ C1] ? __irq_exit_rcu+0x226/0x270 [ 3177.522193][ C1] ? irq_exit_rcu+0xe/0x10 [ 3177.526620][ C1] ? sysvec_call_function_single+0x107/0x130 [ 3177.532591][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 3177.538735][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3177.544809][ C1] ? should_fail+0x72/0x9e0 [ 3177.549327][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3177.555128][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3177.561187][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3177.566390][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3177.571582][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 3177.577125][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3177.582321][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3177.588121][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3177.594181][ C1] ? kmem_cache_alloc+0x166/0xc50 [ 3177.599200][ C1] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 3177.605178][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 3177.610193][ C1] __msan_memcpy+0x43/0x50 [ 3177.614635][ C1] sctp_init_addrs+0x91/0xf0 [ 3177.619222][ C1] sctp_rcv+0x4e92/0x6120 [ 3177.623678][ C1] ? ipv4_confirm+0x381/0x460 [ 3177.628366][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3177.633559][ C1] ? sctp_csum_combine+0xa0/0xa0 [ 3177.638490][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3177.643944][ C1] ip_local_deliver+0x727/0x8d0 [ 3177.648796][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 3177.653813][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3177.659435][ C1] ip_rcv+0x795/0x810 [ 3177.663417][ C1] ? ip_rcv_core+0x1490/0x1490 [ 3177.668176][ C1] __netif_receive_skb+0x265/0x670 [ 3177.673277][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 3177.678847][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 3177.684480][ C1] process_backlog+0x50d/0xba0 [ 3177.689237][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3177.695043][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3177.700317][ C1] napi_poll+0x43b/0xfd0 [ 3177.704555][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3177.709772][ C1] net_rx_action+0x35c/0xd40 [ 3177.714371][ C1] ? net_tx_action+0xdc0/0xdc0 [ 3177.719135][ C1] __do_softirq+0x2ea/0x7f5 [ 3177.723652][ C1] asm_call_on_stack+0xf/0x20 [ 3177.728331][ C1] [ 3177.731270][ C1] do_softirq_own_stack+0x7c/0xa0 [ 3177.736288][ C1] __irq_exit_rcu+0x226/0x270 [ 3177.740960][ C1] irq_exit_rcu+0xe/0x10 [ 3177.745200][ C1] sysvec_call_function_single+0x107/0x130 [ 3177.751019][ C1] asm_sysvec_call_function_single+0x12/0x20 [ 3177.757013][ C1] RIP: 0010:kmsan_get_metadata+0x159/0x180 [ 3177.762812][ C1] Code: ff 0f 00 00 45 84 f6 48 0f 45 c8 48 b8 00 00 00 00 00 16 00 00 48 01 c8 48 c1 e8 04 48 b9 00 d0 cc cc cc cc cc cc 48 0f af c8 <48> 09 d9 48 b8 00 00 00 00 80 88 ff ff e9 fd fe ff ff 31 c0 5b 41 [ 3177.782436][ C1] RSP: 0018:ffff888114097960 EFLAGS: 00000a07 [ 3177.788496][ C1] RAX: 00000000005634a7 RBX: 0000000000000c28 RCX: 0000000113dbb000 [ 3177.796458][ C1] RDX: 00000001141bbc28 RSI: 0000000000000440 RDI: ffff8881141bbc28 [ 3177.804426][ C1] RBP: ffff888114097978 R08: ffffea000000000f R09: ffff88812fffa000 [ 3177.812396][ C1] R10: 0000000000000003 R11: ffff88811a0d3d00 R12: ffff888114097b05 [ 3177.820377][ C1] R13: ffff888114097b88 R14: 0000000000000001 R15: 0000000000000001 [ 3177.828364][ C1] kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3177.833990][ C1] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3177.839947][ C1] tomoyo_check_path_acl+0x14f/0x360 [ 3177.845229][ C1] tomoyo_check_acl+0x239/0x5a0 [ 3177.850073][ C1] ? tomoyo_execute_permission+0x5e0/0x5e0 [ 3177.855880][ C1] tomoyo_path_perm+0x83f/0xc60 [ 3177.860747][ C1] tomoyo_inode_getattr+0x54/0x60 [ 3177.865763][ C1] ? tomoyo_path_rename+0x260/0x260 [ 3177.870999][ C1] security_inode_getattr+0x144/0x280 [ 3177.876368][ C1] __se_sys_newfstat+0x11c/0xaf0 [ 3177.881300][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3177.886491][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3177.892290][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3177.898347][ C1] ? syscall_trace_enter+0x827/0xdc0 [ 3177.903633][ C1] __x64_sys_newfstat+0x3e/0x60 [ 3177.908476][ C1] do_syscall_64+0xad/0x160 [ 3177.912973][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3177.918851][ C1] RIP: 0033:0x7fc99c2522e2 [ 3177.923248][ C1] Code: Bad RIP value. [ 3177.927301][ C1] RSP: 002b:00007fffc707a328 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 3177.935700][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc99c2522e2 [ 3177.943661][ C1] RDX: 00007fffc707a340 RSI: 00007fffc707a340 RDI: 000000000000000e [ 3177.951622][ C1] RBP: 00007fffc707a4e0 R08: 0000000000000000 R09: 0000000000000001 [ 3177.959581][ C1] R10: 0000000000080000 R11: 0000000000000246 R12: 0000560a2afac400 [ 3177.967541][ C1] R13: 0000560a2af30010 R14: 0000560a2af99130 R15: 00007fffc707a4a0 [ 3177.975506][ C1] [ 3177.977832][ C1] Local variable ----filename@process_measurement created at: [ 3177.985322][ C1] process_measurement+0x1d2/0x3960 [ 3177.990507][ C1] process_measurement+0x1d2/0x3960 [ 3177.995685][ C1] ===================================================== [ 3178.002600][ C1] Disabling lock debugging due to kernel taint [ 3178.008734][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 3178.015315][ C1] CPU: 1 PID: 4868 Comm: systemd-udevd Tainted: G B 5.8.0-rc5-syzkaller #0 [ 3178.025183][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3178.035221][ C1] Call Trace: [ 3178.038492][ C1] [ 3178.041337][ C1] dump_stack+0x21c/0x280 [ 3178.045681][ C1] panic+0x4d7/0xef7 [ 3178.049598][ C1] ? add_taint+0x17c/0x210 [ 3178.054013][ C1] kmsan_report+0x1df/0x1e0 [ 3178.058511][ C1] __msan_warning+0x58/0xa0 [ 3178.063129][ C1] update_stack_state+0x974/0xb40 [ 3178.068159][ C1] unwind_next_frame+0x8c6/0xed0 [ 3178.073089][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3178.078895][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 3178.085045][ C1] arch_stack_walk+0x338/0x3d0 [ 3178.089816][ C1] ? stack_trace_save+0x1a0/0x1a0 [ 3178.094837][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 3178.100982][ C1] stack_trace_save+0x117/0x1a0 [ 3178.105828][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3178.111538][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3178.116730][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 3178.122614][ C1] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 3178.128759][ C1] ? kmsan_memcpy_metadata+0xb/0x10 [ 3178.133949][ C1] ? __msan_memcpy+0x43/0x50 [ 3178.138528][ C1] ? sctp_init_addrs+0x91/0xf0 [ 3178.143298][ C1] ? sctp_rcv+0x4e92/0x6120 [ 3178.147793][ C1] ? ip_protocol_deliver_rcu+0x572/0xc50 [ 3178.153432][ C1] ? ip_local_deliver+0x727/0x8d0 [ 3178.158446][ C1] ? ip_rcv+0x795/0x810 [ 3178.162593][ C1] ? __netif_receive_skb+0x265/0x670 [ 3178.167877][ C1] ? process_backlog+0x50d/0xba0 [ 3178.172821][ C1] ? napi_poll+0x43b/0xfd0 [ 3178.177227][ C1] ? net_rx_action+0x35c/0xd40 [ 3178.181981][ C1] ? __do_softirq+0x2ea/0x7f5 [ 3178.186647][ C1] ? asm_call_on_stack+0xf/0x20 [ 3178.191489][ C1] ? do_softirq_own_stack+0x7c/0xa0 [ 3178.196677][ C1] ? __irq_exit_rcu+0x226/0x270 [ 3178.201516][ C1] ? irq_exit_rcu+0xe/0x10 [ 3178.205926][ C1] ? sysvec_call_function_single+0x107/0x130 [ 3178.211903][ C1] ? asm_sysvec_call_function_single+0x12/0x20 [ 3178.218136][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3178.224194][ C1] ? should_fail+0x72/0x9e0 [ 3178.228696][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3178.234494][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3178.240552][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3178.245738][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3178.250929][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 3178.256468][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3178.261660][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3178.267456][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 3178.273514][ C1] ? kmem_cache_alloc+0x166/0xc50 [ 3178.278548][ C1] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 3178.284521][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 3178.289535][ C1] __msan_memcpy+0x43/0x50 [ 3178.293944][ C1] sctp_init_addrs+0x91/0xf0 [ 3178.298529][ C1] sctp_rcv+0x4e92/0x6120 [ 3178.302873][ C1] ? ipv4_confirm+0x381/0x460 [ 3178.307545][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3178.312737][ C1] ? sctp_csum_combine+0xa0/0xa0 [ 3178.317680][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3178.323137][ C1] ip_local_deliver+0x727/0x8d0 [ 3178.327988][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 3178.333016][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3178.338635][ C1] ip_rcv+0x795/0x810 [ 3178.342615][ C1] ? ip_rcv_core+0x1490/0x1490 [ 3178.347373][ C1] __netif_receive_skb+0x265/0x670 [ 3178.352475][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 3178.358025][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 3178.363657][ C1] process_backlog+0x50d/0xba0 [ 3178.368432][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3178.374237][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3178.379529][ C1] napi_poll+0x43b/0xfd0 [ 3178.383770][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3178.388966][ C1] net_rx_action+0x35c/0xd40 [ 3178.393570][ C1] ? net_tx_action+0xdc0/0xdc0 [ 3178.398327][ C1] __do_softirq+0x2ea/0x7f5 [ 3178.402830][ C1] asm_call_on_stack+0xf/0x20 [ 3178.407491][ C1] [ 3178.410426][ C1] do_softirq_own_stack+0x7c/0xa0 [ 3178.415444][ C1] __irq_exit_rcu+0x226/0x270 [ 3178.420111][ C1] irq_exit_rcu+0xe/0x10 [ 3178.424349][ C1] sysvec_call_function_single+0x107/0x130 [ 3178.430149][ C1] asm_sysvec_call_function_single+0x12/0x20 [ 3178.436120][ C1] RIP: 0010:kmsan_get_metadata+0x159/0x180 [ 3178.441915][ C1] Code: ff 0f 00 00 45 84 f6 48 0f 45 c8 48 b8 00 00 00 00 00 16 00 00 48 01 c8 48 c1 e8 04 48 b9 00 d0 cc cc cc cc cc cc 48 0f af c8 <48> 09 d9 48 b8 00 00 00 00 80 88 ff ff e9 fd fe ff ff 31 c0 5b 41 [ 3178.461507][ C1] RSP: 0018:ffff888114097960 EFLAGS: 00000a07 [ 3178.467576][ C1] RAX: 00000000005634a7 RBX: 0000000000000c28 RCX: 0000000113dbb000 [ 3178.475536][ C1] RDX: 00000001141bbc28 RSI: 0000000000000440 RDI: ffff8881141bbc28 [ 3178.483496][ C1] RBP: ffff888114097978 R08: ffffea000000000f R09: ffff88812fffa000 [ 3178.491456][ C1] R10: 0000000000000003 R11: ffff88811a0d3d00 R12: ffff888114097b05 [ 3178.499430][ C1] R13: ffff888114097b88 R14: 0000000000000001 R15: 0000000000000001 [ 3178.507415][ C1] kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3178.513057][ C1] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3178.518942][ C1] tomoyo_check_path_acl+0x14f/0x360 [ 3178.524223][ C1] tomoyo_check_acl+0x239/0x5a0 [ 3178.529065][ C1] ? tomoyo_execute_permission+0x5e0/0x5e0 [ 3178.534876][ C1] tomoyo_path_perm+0x83f/0xc60 [ 3178.539761][ C1] tomoyo_inode_getattr+0x54/0x60 [ 3178.544803][ C1] ? tomoyo_path_rename+0x260/0x260 [ 3178.549999][ C1] security_inode_getattr+0x144/0x280 [ 3178.555378][ C1] __se_sys_newfstat+0x11c/0xaf0 [ 3178.560435][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3178.565655][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 3178.571458][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3178.577537][ C1] ? syscall_trace_enter+0x827/0xdc0 [ 3178.582831][ C1] __x64_sys_newfstat+0x3e/0x60 [ 3178.587683][ C1] do_syscall_64+0xad/0x160 [ 3178.592194][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3178.598081][ C1] RIP: 0033:0x7fc99c2522e2 [ 3178.602478][ C1] Code: Bad RIP value. [ 3178.606530][ C1] RSP: 002b:00007fffc707a328 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 3178.614933][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc99c2522e2 [ 3178.622894][ C1] RDX: 00007fffc707a340 RSI: 00007fffc707a340 RDI: 000000000000000e [ 3178.630857][ C1] RBP: 00007fffc707a4e0 R08: 0000000000000000 R09: 0000000000000001 [ 3178.638821][ C1] R10: 0000000000080000 R11: 0000000000000246 R12: 0000560a2afac400 [ 3178.646790][ C1] R13: 0000560a2af30010 R14: 0000560a2af99130 R15: 00007fffc707a4a0 [ 3178.656186][ C1] Kernel Offset: disabled [ 3178.660511][ C1] Rebooting in 86400 seconds..