280)={0x0}}, 0x0) dup2(r9, r8) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000001540)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fsmount(r7, 0x1, 0x86) [ 1329.172953][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:24 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0x9d0000, 0x2, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x4, [], @p_u8=&(0x7f0000000000)=0x8}}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="4c6b8eeec72597d47770452b054084c0", 0x10) 16:05:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 16:05:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 16:05:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x9, 0x1, 0x5}) 16:05:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:05:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 16:05:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x9, 0x1, 0x5}) 16:05:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 16:05:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x9, 0x1, 0x5}) 16:05:24 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x5}) 16:05:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 16:05:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 16:05:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x5}) 16:05:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 16:05:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x5}) [ 1330.212749][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:25 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) creat(0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat(r5, &(0x7f0000000140)='./file0\x00', 0x801, 0x187) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x3}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r6, 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}) socketpair(0x0, 0x0, 0x0, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r9}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={r9, 0x3}, 0x8) 16:05:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 16:05:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x0, 0x5}) 16:05:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x11, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}) socketpair(0x0, 0x0, 0x0, 0x0) 16:05:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 16:05:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x0, 0x5}) 16:05:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x8000, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000180)={0x2, 0x8000}) socketpair(0x0, 0x0, 0xffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x84c01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x12) 16:05:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 16:05:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x0, 0x5}) 16:05:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 16:05:25 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:25 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 16:05:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 16:05:26 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_enter(r2, 0x3572, 0xd272, 0x0, &(0x7f0000000000)={[0x4]}, 0x8) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x20001, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r5 = socket(0x10, 0x80002, 0x0) close(r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r6, 0x417, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r6, 0x210, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3d000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe370}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc18d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x50}}, 0x20004000) 16:05:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 16:05:26 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:26 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1331.254995][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 16:05:26 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:policy_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) dup2(r1, r0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x4, 0x4) 16:05:26 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) io_uring_setup(0x4340, &(0x7f0000000000)={0x0, 0x1ce0, 0x20, 0x1, 0x27f, 0x0, 0xffffffffffffffff}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x12ec2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x0, 0xc, 0x3}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) [ 1331.412682][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 16:05:26 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:26 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1331.651492][T29888] FAULT_INJECTION: forcing a failure. [ 1331.651492][T29888] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.702561][T29888] CPU: 0 PID: 29888 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 1331.711427][T29888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.721481][T29888] Call Trace: [ 1331.724786][T29888] dump_stack+0x18f/0x20d [ 1331.729128][T29888] should_fail.cold+0x5/0x14 [ 1331.733733][T29888] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1331.739455][T29888] should_failslab+0x5/0xf [ 1331.743879][T29888] __kmalloc+0x27d/0x340 [ 1331.748264][T29888] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1331.753836][T29888] tomoyo_realpath_from_path+0xc3/0x620 [ 1331.759522][T29888] ? tomoyo_profile+0x42/0x50 [ 1331.764207][T29888] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1331.769670][T29888] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1331.775306][T29888] ? tomoyo_execute_permission+0x470/0x470 [ 1331.781273][T29888] ? lock_acquire+0x1f1/0xad0 [ 1331.785953][T29888] ? delayed_put_pid+0x30/0x30 [ 1331.790730][T29888] ? lock_is_held_type+0xb0/0xe0 [ 1331.795686][T29888] ? selinux_inode_getsecctx+0x90/0x90 [ 1331.801150][T29888] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1331.806700][T29888] ? lock_is_held_type+0xb0/0xe0 [ 1331.811650][T29888] ? __fget_files+0x294/0x400 [ 1331.816334][T29888] security_file_ioctl+0x50/0xb0 [ 1331.821273][T29888] ksys_ioctl+0x50/0x180 [ 1331.825528][T29888] __x64_sys_ioctl+0x6f/0xb0 [ 1331.830123][T29888] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1331.835239][T29888] do_syscall_64+0x60/0xe0 [ 1331.839657][T29888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1331.845555][T29888] RIP: 0033:0x45c369 [ 1331.849597][T29888] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1331.869196][T29888] RSP: 002b:00007f28df29fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1331.877604][T29888] RAX: ffffffffffffffda RBX: 000000000000b6c0 RCX: 000000000045c369 [ 1331.885580][T29888] RDX: 0000000020000080 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1331.893563][T29888] RBP: 00007f28df29fca0 R08: 0000000000000000 R09: 0000000000000000 16:05:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 1331.901628][T29888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1331.909599][T29888] R13: 00007ffed5601f6f R14: 00007f28df2a09c0 R15: 000000000078bf0c 16:05:27 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1332.049465][T29888] ERROR: Out of memory at tomoyo_realpath_from_path. 16:05:27 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 16:05:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xffffffffffffff23}}, 0x4000) dup2(r4, r3) getsockopt$inet_int(r4, 0x0, 0xe, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:27 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1332.212673][T29901] FAULT_INJECTION: forcing a failure. [ 1332.212673][T29901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1332.226108][T29901] CPU: 0 PID: 29901 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 1332.234777][T29901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.244840][T29901] Call Trace: [ 1332.248138][T29901] dump_stack+0x18f/0x20d [ 1332.252474][T29901] should_fail.cold+0x5/0x14 [ 1332.257072][T29901] __alloc_pages_nodemask+0x1a3/0x930 [ 1332.262450][T29901] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1332.269220][T29901] ? lock_downgrade+0x820/0x820 [ 1332.274186][T29901] cache_grow_begin+0x8c/0xb20 [ 1332.278953][T29901] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1332.284419][T29901] cache_alloc_refill+0x27b/0x340 [ 1332.289551][T29901] ? lockdep_hardirqs_off+0x66/0xa0 [ 1332.292745][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.294750][T29901] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1332.294764][T29901] __kmalloc+0x319/0x340 [ 1332.294788][T29901] tomoyo_realpath_from_path+0xc3/0x620 [ 1332.318324][T29901] ? tomoyo_profile+0x42/0x50 [ 1332.323012][T29901] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1332.328475][T29901] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1332.334196][T29901] ? tomoyo_execute_permission+0x470/0x470 [ 1332.340003][T29901] ? lock_acquire+0x1f1/0xad0 [ 1332.344688][T29901] ? delayed_put_pid+0x30/0x30 [ 1332.349460][T29901] ? lock_is_held_type+0xb0/0xe0 [ 1332.354412][T29901] ? selinux_inode_getsecctx+0x90/0x90 [ 1332.359879][T29901] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1332.365430][T29901] ? lock_is_held_type+0xb0/0xe0 [ 1332.370381][T29901] ? ib_uverbs_open+0x80/0x8e0 [ 1332.375153][T29901] ? __fget_files+0x294/0x400 [ 1332.379833][T29901] security_file_ioctl+0x50/0xb0 [ 1332.384786][T29901] ksys_ioctl+0x50/0x180 [ 1332.389040][T29901] __x64_sys_ioctl+0x6f/0xb0 [ 1332.393634][T29901] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1332.398749][T29901] do_syscall_64+0x60/0xe0 [ 1332.403181][T29901] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1332.409073][T29901] RIP: 0033:0x45c369 [ 1332.412975][T29901] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1332.432747][T29901] RSP: 002b:00007f28df29fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.441255][T29901] RAX: ffffffffffffffda RBX: 000000000000b6c0 RCX: 000000000045c369 [ 1332.449222][T29901] RDX: 0000000020000080 RSI: 00000000c02064b2 RDI: 0000000000000003 16:05:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 1332.457192][T29901] RBP: 00007f28df29fca0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.465165][T29901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.473145][T29901] R13: 00007ffed5601f6f R14: 00007f28df2a09c0 R15: 000000000078bf0c [ 1332.503332][T28312] usb 3-1: new high-speed USB device number 4 using dummy_hcd 16:05:27 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:27 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) [ 1332.649217][T29913] FAULT_INJECTION: forcing a failure. [ 1332.649217][T29913] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.687438][T29913] CPU: 0 PID: 29913 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 1332.696301][T29913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.706439][T29913] Call Trace: [ 1332.709752][T29913] dump_stack+0x18f/0x20d [ 1332.714206][T29913] should_fail.cold+0x5/0x14 [ 1332.718803][T29913] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1332.724176][T29913] should_failslab+0x5/0xf [ 1332.728596][T29913] __kmalloc+0x27d/0x340 [ 1332.732851][T29913] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1332.738582][T29913] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1332.743795][T29913] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1332.749521][T29913] tomoyo_encode+0x28/0x50 [ 1332.753953][T29913] tomoyo_realpath_from_path+0x186/0x620 [ 1332.759596][T29913] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1332.762483][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1332.765060][T29913] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1332.765082][T29913] ? tomoyo_execute_permission+0x470/0x470 [ 1332.765103][T29913] ? lock_acquire+0x1f1/0xad0 [ 1332.786188][T29913] ? delayed_put_pid+0x30/0x30 [ 1332.790957][T29913] ? lock_is_held_type+0xb0/0xe0 [ 1332.795909][T29913] ? selinux_inode_getsecctx+0x90/0x90 [ 1332.801372][T29913] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1332.807036][T29913] ? lock_is_held_type+0xb0/0xe0 [ 1332.811980][T29913] ? __fget_files+0x294/0x400 [ 1332.816793][T29913] security_file_ioctl+0x50/0xb0 [ 1332.821742][T29913] ksys_ioctl+0x50/0x180 [ 1332.825988][T29913] __x64_sys_ioctl+0x6f/0xb0 [ 1332.830579][T29913] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1332.835698][T29913] do_syscall_64+0x60/0xe0 [ 1332.840141][T29913] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1332.846034][T29913] RIP: 0033:0x45c369 [ 1332.849931][T29913] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1332.869618][T29913] RSP: 002b:00007f28df29fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.878030][T29913] RAX: ffffffffffffffda RBX: 000000000000b6c0 RCX: 000000000045c369 [ 1332.885997][T29913] RDX: 0000000020000080 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1332.893966][T29913] RBP: 00007f28df29fca0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.902050][T29913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.910109][T29913] R13: 00007ffed5601f6f R14: 00007f28df2a09c0 R15: 000000000078bf0c 16:05:28 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1332.963078][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 16:05:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 16:05:28 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 16:05:28 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1333.163058][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1333.185464][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 16:05:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 1333.220237][T28312] usb 3-1: Product: syz [ 1333.239099][T28312] usb 3-1: Manufacturer: syz [ 1333.258383][T28312] usb 3-1: SerialNumber: syz [ 1333.286750][T28312] usb 3-1: config 0 descriptor?? [ 1333.336237][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.428060][T29913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1333.573474][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.575331][T28312] usb 3-1: USB disconnect, device number 4 16:05:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"], 0x8, [{0x5a, &(0x7f0000000040)=@string={0x5a, 0x3, "4f73d6f2dd6fa8ab9001d49e93a8fb390e41942c9056fa2d9a058998566b27fb724fd628bf3984d2539c87036489120b18c30b72ea9147d8d5909e58535ab4469d8f03f27fb4d54bad77b91d25f1ed4301000000775dee78"}}, {0xee, &(0x7f0000000580)=@string={0xee, 0x3, "8648f82744a0f04294db27854603d4602c13b81b8d9a014415f5fda6db9ba4f5619342385992003d354fcdc94f403a2870d3251c4ccf37362c82758eaa9d819283c3df8ffc3bfafd508e5ae35c9236badc9b26038cf6c7bbd5a3687ec0887811ab6bd514463312fdefcbbf512569bcca6069868fe95cec13be927eb132a36b92011c3b9f02b7f65a46d745434f151da8b94660a57f45fa5648841926c5d0ea46c12f781e4427db473ca85e95399ffd17b935e4624e04225f73430cf6c6b180fc5ec650f377a25f0a6850beb258d9812f482d1a4f562721fa35c86cf73371ed79a034bef345187a74c95cfe7e"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}, {0xa, &(0x7f00000002c0)=@string={0xa, 0x3, "c35fa9d41431ca60"}}, {0xc4, &(0x7f0000000300)=@string={0xc4, 0x3, "863523de3cbad2c9aac170614a50ea1744231455ca561e6da6654886701de4e469cb07dfe7dc93ff8edf72ec08c7435b94cd93fa8c5c2e90211c52287a4720b3d3213d6fb256902dac30abd9472820c18e4d1b899d1a197848d32295aa6ab9f649eb1206c3f5eb576bc564a5fcbc83191c904c687eeea6f6b27ca78980e588e80b6bf6c290daa6b4e4076f7af5ee2999103882f947c8eb1ae5006c487e6a30c2ea23516e9b6123ad4d95463f58ff31143566f1023e4e20092ad508b67b034e7fa0a8"}}, {0x8a, &(0x7f0000000400)=@string={0x8a, 0x3, "75302162180d99ace43d67bc0051f7daeba012066cccc5796d60bec8b5c5ac922f7dbf63a61ec9e08847f47162d86c2cd7fa67203f0e9955355055111ab53c187cc0c2cc359f0768cf5c9576b80acc10ccf644c6f9f9a1bb1213b672ea7d8a90a33ff901d08ad4a7f6f0828e1252d16edad7637010455b22f8a1325c97ed0c1104dccf930c45a039"}}]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:29 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x6, 0x0, 0x1, 0x61a9, 0x0}) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) 16:05:29 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 16:05:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 16:05:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:29 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x10, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:29 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1334.372607][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}) [ 1334.461184][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:29 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1334.625585][T28312] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1334.872822][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1335.075474][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1335.252960][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1335.265499][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.284694][T28312] usb 3-1: Product: 䐊 [ 1335.294455][T28312] usb 3-1: Manufacturer: 䢆⟸ꁄ䋰蔧͆惔ጬ᮸骍䐁꛽鯛鍡㡂鉙㴀伵짍䁏⠺퍰ᰥ콌㘷般蹵鶪銁쎃迟㯼ﷺ蹐鉜먶鯜̦믇ꏕ繨裀ᅸ殫ᓕ㍆ﴒ쯯冿椥쪼楠辆峩Ꮼ銾녾ꌲ鉫ᰁ鼻뜂嫶흆䍅ᕏꠝ䚹ꕠ䕿固葈☙탅䛪⿁Ṹ❄䟛꠼镞鼹៽㖹拤ю弢䍳뇆ﲀ왞ꉷ੟偨늾⾁ⵈ会❖﨡젵焳秭㒠ᡅ瑺峉绾 [ 1335.366569][T28312] usb 3-1: SerialNumber: Х [ 1335.384146][T28312] usb 3-1: config 0 descriptor?? [ 1335.412524][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.674986][T28312] usb 3-1: USB disconnect, device number 5 16:05:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="3090b8fcf473"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x4b47, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r6, 0x81}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={r7, 0x5, 0x0, 0x0, 0x9, 0x101, 0x8, 0x20, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0x2b692b05, 0x9, 0x1, 0x1c000000}}, &(0x7f0000000180)=0xb0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BLKROGET(r8, 0x125e, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) sendto$packet(r8, &(0x7f00000003c0)="065108fd52c471f16d26224678b7ebf92cf3eb7dedd5673b22317d3496fdcc3bc21d87838490930b3b9bde6f4cb12177164599cb3ac429230cf2f32c8f8d27cade2d079f4430f4faccacb825d2e13eee14457640cca159fd994e85e8be6401c7ec62ff8d4f02e856998b8bbf1c47c1caf90f3ddc35172a21f7fbdd48bb62b31f31ca3aaeaee246e70280fdfbbb61d7fa9c770b1ce423bb556ca74a692c29ece850a393b5c345a81e20d7034f1fd409e8f5d15befdef9d8", 0xb7, 0x4000, 0x0, 0x0) r9 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200040, 0x0, 0x12}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000200)={0x3, 0x1000, 0x0, 'queue1\x00', 0xffff}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000380)={0x3000, 0x2, 0x7, 0xce3e, 0x7}) 16:05:31 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x4b49, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x327201) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) [ 1336.452547][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x4c01, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x72bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004) r4 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000000)) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc0c0583b, &(0x7f0000000100)) 16:05:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x541b, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1336.682341][T32441] usb 3-1: new high-speed USB device number 6 using dummy_hcd 16:05:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f00000000c0)=0x401) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000000)={0x800, 0x0, [], {0x0, @bt={0x4, 0xfffffffa, 0x1, 0x0, 0x1e, 0x0, 0x20, 0x0, 0x7, 0x81, 0x0, 0xfffffff7, 0x6, 0x301, 0x14, 0x20, {0xfffffa93, 0xff}, 0x1, 0x5}}}) [ 1336.922230][T32441] usb 3-1: Using ep0 maxpacket: 8 [ 1337.082759][T32441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1337.182777][T32441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1337.376450][T32441] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1337.387131][T32441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.400573][T32441] usb 3-1: Product: syz [ 1337.407123][T32441] usb 3-1: Manufacturer: syz [ 1337.411759][T32441] usb 3-1: SerialNumber: syz [ 1337.428522][T32441] usb 3-1: config 0 descriptor?? [ 1337.492357][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.503534][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.728241][T32441] usb 3-1: USB disconnect, device number 6 16:05:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x11, 0x80000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5450, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x20, &(0x7f0000ffa000/0x4000)=nil, 0xe5bf}) 16:05:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x145400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7db, 0x3, 0x6, 0x58, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x5, 0x9, 0x6, 0xfff}) syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xffffffff, 0x680481) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x10800, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000000)={r1}) 16:05:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5451, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) 16:05:33 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0xffffffffffffffff, 0x809) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)) 16:05:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) [ 1338.532372][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:05:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5460, &(0x7f0000000080)={0x1, 0x9, 0x1}) [ 1338.782254][ T2505] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1339.025804][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1339.226041][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1339.405933][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1339.425173][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.448765][ T2505] usb 3-1: Product: syz [ 1339.465361][ T2505] usb 3-1: Manufacturer: syz [ 1339.479500][ T2505] usb 3-1: SerialNumber: syz [ 1339.500909][ T2505] usb 3-1: config 0 descriptor?? [ 1339.577068][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.798219][ T2505] usb 3-1: USB disconnect, device number 7 [ 1340.532271][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.550199][ T2505] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1340.628955][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.792019][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1340.992551][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1341.166178][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1341.181010][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.196520][ T2505] usb 3-1: Product: syz [ 1341.200803][ T2505] usb 3-1: Manufacturer: syz [ 1341.207474][ T2505] usb 3-1: SerialNumber: syz [ 1341.223762][ T2505] usb 3-1: config 0 descriptor?? 16:05:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x761982, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x1, 0x1, 0x76a, 0xfffffffb, 0x2, 0x0, 0x8, 0x4, 0x0, 0x1, 0x3}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x500}) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0400000000000000a20300000000000002000000000000003e0800000000000002000000000000001f090000000000000000000000000000b2010000000000000000000000000000fb6385372b7093abf14e20ef386025b0ae73e8d039a6514fb70009b52cdb8fda3f8395399c0aa5a46ab329dc1b6d7d3276f8"]) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r3, r5, 0xfffffffffffffff9}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) dup2(r6, r8) 16:05:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:36 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x10400) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc0c0583b, &(0x7f0000000100)) 16:05:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x6364, &(0x7f0000000080)={0x1, 0x9, 0x1}) [ 1341.377437][ T2505] usb 3-1: USB disconnect, device number 8 16:05:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt(0xffffffffffffffff, 0x20, 0x2, &(0x7f00000000c0)=""/154, &(0x7f0000000180)=0x9a) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000040)={r2, 0x1, 0x2000, 0x100000000}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CAPI_GET_MANUFACTURER(r7, 0xc0044306, &(0x7f0000000080)=0x7fff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x8933, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x306d7a1f795dd612}) fsync(r1) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:05:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0xfdc, 0x0, 0x3, 0x1, 0xbb9}, 0xc) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) [ 1341.652804][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x89f1, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x101000) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 16:05:36 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) dup2(r2, r0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd29, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r7, 0x29, 0x1, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000100)) 16:05:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x89f2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:36 executing program 4: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}) [ 1341.972068][ T2505] usb 3-1: new high-speed USB device number 9 using dummy_hcd 16:05:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xae01, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1342.212052][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1342.412555][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1342.582093][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1342.591131][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.606322][ T2505] usb 3-1: Product: syz [ 1342.610609][ T2505] usb 3-1: Manufacturer: syz [ 1342.617081][ T2505] usb 3-1: SerialNumber: syz [ 1342.627676][ T2505] usb 3-1: config 0 descriptor?? [ 1342.702095][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.918112][ T2505] usb 3-1: USB disconnect, device number 9 [ 1343.172087][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.572065][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.665778][ T2505] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1343.737334][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.921857][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1344.122448][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1344.302501][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1344.311638][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.331824][ T2505] usb 3-1: Product: syz [ 1344.335988][ T2505] usb 3-1: Manufacturer: syz [ 1344.340547][ T2505] usb 3-1: SerialNumber: syz [ 1344.348235][ T2505] usb 3-1: config 0 descriptor?? 16:05:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) 16:05:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r5, 0x20, 0x1, @ib={0x1b, 0x86eb, 0x40, {"0f636c2b763541014f42ddfa8500b06a"}, 0x80000001, 0x8, 0xd06}}}, 0xa0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="9cb5a928de28906d7bc56da7da303cb79c31747e87c1114f5ba7a12543a3e5c7c5dd50297287f4b54339bc56013b9c6169e0f0700974e12c524fa3096eb1dd8236df3a16681776255b7757e428b4f169edb1ffd398e32bd97ff1a9d8d2bde454f306bbf66a169c10fe89f15cc6693b74700bba4a", 0x74) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2}) 16:05:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xae41, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='setgroups\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[], 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xa9ed, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x1, 0xec9e, 0x1f, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) [ 1344.518121][ T2505] usb 3-1: USB disconnect, device number 10 16:05:39 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)='/dev/dri/card#\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='$)+\x00', &(0x7f0000000180)='#&\x00'], &(0x7f0000000480)=[&(0x7f0000000240)='#\x00', &(0x7f0000000280)='/\x00', &(0x7f00000002c0)='-{-*)^$($)-\\\x00', &(0x7f0000000300)='\':-.\x00', &(0x7f0000000340)='-}\x00', &(0x7f0000000380)='/dev/dri/card#\x00', &(0x7f00000003c0)='/dev/dri/card#\x00', &(0x7f0000000400)='!^^!\x00', &(0x7f0000000440)='/dev/dri/card#\x00'], 0x800) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) 16:05:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xae80, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x3}) 16:05:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x3, 0x2a0d80) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, 0x40000000, 0xfffffffd}) 16:05:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1344.772746][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.011873][ T2505] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1345.251795][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1345.452343][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1345.621830][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1345.631015][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.639951][ T2505] usb 3-1: Product: syz [ 1345.644685][ T2505] usb 3-1: Manufacturer: syz [ 1345.649271][ T2505] usb 3-1: SerialNumber: syz [ 1345.660225][ T2505] usb 3-1: config 0 descriptor?? [ 1345.811934][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.947593][ T2505] usb 3-1: USB disconnect, device number 11 16:05:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000140)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f6, 0x1, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x400454ca, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) dup(r0) 16:05:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x10100, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000240)={0x1, 0x2, 0xbada4acd, {0xff, 0x400}, 0x8, 0x7fffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a00000008"], 0x58}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000100", @ANYRES16=r3, @ANYBLOB="00012bbd7000ffdbdf25010000000800040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8c020000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x128, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd0}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x14}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x244c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x128}, 0x1, 0x0, 0x0, 0xa088}, 0x20000010) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8001, 0x2, 0x2, 0x3}) 16:05:41 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x404240) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000240)) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r7, 0xc02064a4, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0xfff9], &(0x7f0000000080)=[0x84, 0x4, 0x9, 0x4, 0x4, 0x3], &(0x7f0000000180)=[0x2, 0x4, 0x0, 0x4]}) 16:05:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1346.498049][T30241] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1346.536624][T30241] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 16:05:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) tkill(0x0, 0x2) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7601371c156c6b81, 0x0, 0x40000, 0x2003) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = clone3(&(0x7f0000000300)={0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x26}, &(0x7f00000000c0)=""/21, 0x15, &(0x7f0000000200)=""/194, &(0x7f0000000140)=[0x0, 0x0, r1, 0xffffffffffffffff, r2], 0x5, {r5}}, 0x58) sched_getparam(r6, &(0x7f0000000180)) 16:05:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x40049409, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:41 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) socketpair(0x1, 0x800, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) getsockopt$sock_int(r7, 0x1, 0x4, 0x0, &(0x7f0000000240)) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200, 0x0) io_submit(r1, 0x2000000000000196, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000000)="44e582156b9e27641f5ce1576f87ec0e82ec3506", 0x14, 0x79e2, 0x0, 0x2, r6}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x400, r7, &(0x7f0000000200)="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", 0xff, 0x20, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x9, r9, &(0x7f0000000380)="3b094b05d00611034ef85e21a3c43be2777504e2432aec4f2cf6587df1ad31577e9103c51721e377f7026e8a163bbdb211bba9da4bb68bf3d1c54021d4b903064ba73bbd053df6c6c97873d7adca5bb2b81750846ad5ee648935e0dc463a", 0x5e, 0x1, 0x0, 0x2, r10}]) [ 1346.611925][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000000)) [ 1346.831752][ T8480] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1346.859158][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.081773][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1347.241753][ T8480] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1347.338002][ T8480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1347.516861][ T8480] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1347.529426][ T8480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.546098][ T8480] usb 3-1: Product: syz [ 1347.550383][ T8480] usb 3-1: Manufacturer: syz [ 1347.560569][ T8480] usb 3-1: SerialNumber: syz [ 1347.600381][ T8480] usb 3-1: config 0 descriptor?? [ 1347.884013][ T8480] usb 3-1: USB disconnect, device number 12 [ 1347.897688][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.611999][T28312] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1348.891586][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1348.932703][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.051944][T28312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1349.132274][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1349.301945][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1349.310964][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.320031][T28312] usb 3-1: Product: syz [ 1349.324655][T28312] usb 3-1: Manufacturer: syz [ 1349.329231][T28312] usb 3-1: SerialNumber: syz [ 1349.342867][T28312] usb 3-1: config 0 descriptor?? 16:05:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="050f3300024a7eb5ea9fe218606861f574c3d19959bae25a95aaf871898045d3fc232c"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x40086602, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000000)=0x8, 0x4) 16:05:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x10}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:05:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000100)=[0x32, 0x1f, 0x6, 0x0, 0x4, 0xdbc1, 0x820], 0x7, 0x5, 0x9, 0x4, 0x5, 0x7f, 0x7, {0xffff, 0x100, 0x3, 0xf9a, 0x7, 0xffff, 0x27, 0x7, 0x0, 0xa509, 0x21be, 0x9, 0x8ab6, 0x4, "8fb9d8e5719039fb408fde939525ac038ff3147d2fa5040c54c63504e2df6fa6"}}) open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x10a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3fc94113, 0x5, 0x8, 0x7fff, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r2}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000080)) [ 1349.527399][T28312] usb 3-1: USB disconnect, device number 13 16:05:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x40087602, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x401002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000040)) 16:05:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) close(r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r1, 0x417, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa9323855cea7bd73}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x50, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24000800) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x80, 0x101000) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x200000, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000040)={0xe00000, 0x9, 0x7, 0x91a, 0x2, [0x100, 0x5, 0xfffff001, 0x3ff], [0x1, 0x12, 0x4, 0x9], [0x101, 0x2, 0x0, 0xfffffe52], [0x3, 0x4, 0x4a, 0x1b65]}) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000180)={0x0, 0x8, 0xffff, 0x5e7, 0x10000, 0x0, 0x0, 0xa6d, 0x7f, 0xfffffffc}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockopt$sock_int(r7, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$sock_bt_cmtp_CMTPCONNDEL(r7, 0x400443c9, &(0x7f0000000000)={@fixed={[], 0x10}, 0x68}) [ 1349.653433][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='{^\xe7:\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:05:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1349.981743][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.001580][T28312] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1350.252231][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1350.372153][T28312] usb 3-1: unable to get BOS descriptor set [ 1350.452100][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1350.621576][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1350.630665][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.639462][T28312] usb 3-1: Product: syz [ 1350.643978][T28312] usb 3-1: Manufacturer: syz [ 1350.648594][T28312] usb 3-1: SerialNumber: syz [ 1350.654774][T28312] usb 3-1: config 0 descriptor?? [ 1350.934667][T28312] usb 3-1: USB disconnect, device number 14 [ 1351.011683][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"], 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x90, &(0x7f0000000080)=@string={0x90, 0x3, "5eadbbb3af31c4e99a66a67b80c96831182037cd1bdc3242046d3bbace7056a77e7c0de9438b5e737618db6e7378780b426d3ab548a6b860b6ca631fa8cc956fefce30068ddaca8ec123fb9fe2f46b75dfb1d8587dd054017c6770b0b3408385b503537f035d9e6444bc9d8ab1b4460863f6ca010bcf39bd67ea4c3d469067794e3cd0c55adcf52340946b2d7f14"}}]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 16:05:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x40186366, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x280000) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) tkill(0x0, 0x2) ptrace$setregs(0xf, 0x0, 0x3f, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000600)="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") ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000480)={{0x7, 0x5, 0xd, 0xffffffff, 'syz1\x00', 0x8}, 0x0, 0x200, 0x2, 0x0, 0x7, 0xc01a, 'syz1\x00', &(0x7f0000000440)=['/dev/dri/card#\x00', '%$#$-\\\x00', '}\x05:/&\x00', '\x00', '/dev/dri/card#\x00', '\x00', '/dev/dri/card#\x00'], 0x3c, [], [0x1000, 0xff8a, 0x5, 0x8001]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = clone3(&(0x7f0000000140)={0x20028000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x25}, &(0x7f0000000200)=""/231, 0xe7, &(0x7f0000000300)=""/250, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, r1, r2], 0x6, {r5}}, 0x58) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x1, r6}) 16:05:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) syz_usb_connect$cdc_ecm(0x4, 0x76, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x92, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x3f, {{0xb, 0x24, 0x6, 0x0, 0x0, "ffeaed553b72"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xac2, 0x8, 0x3, 0x81}, [@country_functional={0x6, 0x24, 0x7, 0x4a, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffe, 0x5, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x1, 0xf5, 0x6, 0x3, 0x3ff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0xfc, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0xfd, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x27, 0x80}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x3f, 0x3b, 0xff, 0x40, 0x1}, 0x23, &(0x7f0000000380)=ANY=[@ANYBLOB="050f2300030a100302ac8805d800000a1003020e000740ffff0a140300020004010500"], 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc09}}]}) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SMPS_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8810) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000440)={0x0, 'veth1_to_team\x00', {0x1}, 0x4}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) 16:05:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r6, r5) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000080)) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x56, 0x9c, 0x5, 0x40}, {0x9, 0x0, 0x20, 0x5}, {0x7, 0x24, 0x2, 0x9}]}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) fcntl$dupfd(r0, 0x406, r2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:05:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x4020940d, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000000, 0x424502) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x220000, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x7, {0x0, 0x5}}, 0x20) 16:05:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x4020ae46, &(0x7f0000000080)={0x1, 0x9, 0x1}) [ 1351.771478][T28312] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1352.026951][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1352.052260][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.237127][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1352.417587][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1352.436341][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.444689][T28312] usb 3-1: Product: syz [ 1352.448855][T28312] usb 3-1: Manufacturer: 굞뎻ㆯ暚箦즀ㅨ‘촷䈲洄먻烎Ꝗ籾譃獞ᡶ滛硳୸浂딺Ꙉ悸쪶ὣ첨澕컯ذ車⏁鿻畫뇟壘큽Ŕ杼끰䂳薃ε罓崃撞뱄誝뒱ࡆNJ켋봹㵌遆祧㱎에⏵鑀⵫ᑿ [ 1352.478890][T28312] usb 3-1: SerialNumber: syz [ 1352.489118][T28312] usb 3-1: config 0 descriptor?? [ 1352.691772][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.771637][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.787565][T28312] usb 3-1: USB disconnect, device number 15 [ 1353.093738][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = dup2(r4, r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x8}) getsockopt$sock_int(r4, 0x1, 0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81}) 16:05:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x4090ae82, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:48 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) fcntl$setsig(r0, 0xa, 0x39) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc0c0583b, &(0x7f0000000100)) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000040)={0x9, 0x7}) 16:05:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x3, 0x6b, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) 16:05:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x80086301, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000000c0)=0x7) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x5}, &(0x7f0000000040)=0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) sendto$inet6(r8, &(0x7f0000000200)="f1a727a37bc7e5c8d6f80954f569df98ee2ef8eee260f3cf9990fb428969fad972988c189793593cc7da9ed7abb2fde4974151a60b6970acee92215dc71f467efc67690b680cd4c0efc05ac82e76afc05fe66acae5c6d09b7c622597d3b061e83c1b6c5f664c2c443e7013001bad64b094aad1eb900d2712e5012f326753d52ee47e64cae7a74465fd1e58c89166", 0x8e, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, [], 0x1e}, 0x10000}, 0x1c) r9 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r9, 0xc03064b7, &(0x7f0000000100)) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0xaaaee2797b283a89, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000380)=0x6) 16:05:48 executing program 4: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000000, 0x40000000}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x1}, 0x8) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22, 0x3) 16:05:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x80086601, &(0x7f0000000080)={0x1, 0x9, 0x1}) [ 1353.691411][T28312] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1353.961395][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1354.131603][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.162890][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1354.351472][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1354.360648][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.381322][T28312] usb 3-1: Product: syz [ 1354.385493][T28312] usb 3-1: Manufacturer: syz [ 1354.390062][T28312] usb 3-1: SerialNumber: syz [ 1354.397473][T28312] usb 3-1: config 0 descriptor?? [ 1354.691687][T28312] usb 3-1: USB disconnect, device number 16 16:05:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd9390102030109022200010007903f090000011dea4e000905060000000000000725010000000000"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x84000, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 16:05:50 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="03020000000000002800128009000100766c616e000000001800028006000100000000000c0002ffee0000000a00000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x18, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000080001000000000008000300"/26, @ANYRES32=r6, @ANYBLOB="080005000400000008000300", @ANYRES32=r9, @ANYBLOB="080005000c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14008000}, 0x20008014) r10 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) rseq(&(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x6, 0xbc, 0x1}, 0x2}, 0x20, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc0c0583b, &(0x7f0000000100)) 16:05:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x80087601, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xd0, 0x7, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x101, 0x1f, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40014) dup2(r3, r2) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x8, 0x9c, 0x9, 0x2, 0x8000, 0x9}) [ 1355.172332][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0045878, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x1d1142) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:05:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40801, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) 16:05:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0045878, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) [ 1355.641460][ T2520] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1355.738382][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.891559][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1356.092117][ T2520] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.114951][ T2520] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1356.222091][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.301938][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1356.313136][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.331249][ T2520] usb 3-1: Product: syz [ 1356.342147][ T2520] usb 3-1: Manufacturer: syz [ 1356.347214][ T2520] usb 3-1: SerialNumber: syz [ 1356.375953][ T2520] usb 3-1: config 0 descriptor?? [ 1356.662653][ T2520] usb 3-1: USB disconnect, device number 17 16:05:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400000}) 16:05:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000080)={0x1, 0x9, 0x1}) [ 1357.265412][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:05:52 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @multicast2}, {0x6}, 0x6, {0x2, 0x4e20, @remote}, 'veth1\x00'}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)) 16:05:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc020660b, &(0x7f0000000080)={0x1, 0x9, 0x1}) [ 1357.511206][ T2517] usb 3-1: new high-speed USB device number 18 using dummy_hcd 16:05:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000}) 16:05:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x9, 0x1}) [ 1357.761313][ T2517] usb 3-1: Using ep0 maxpacket: 8 16:05:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1357.961983][ T2517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1358.145320][ T2517] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1358.164298][ T2517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.201144][ T2517] usb 3-1: Product: syz [ 1358.205601][ T2517] usb 3-1: Manufacturer: syz [ 1358.210429][ T2517] usb 3-1: SerialNumber: syz [ 1358.232897][ T2517] usb 3-1: config 0 descriptor?? [ 1358.302103][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.517692][ T2517] usb 3-1: USB disconnect, device number 18 [ 1358.771265][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x8) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:05:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080), 0x4) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={r2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x5}) 16:05:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffe, 0x10480) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc61}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) socketpair(0x1, 0x78f4d784c917b085, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x105001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f0000000500)={0x2e, 0x6, "8c692a4c28d7f94087dbc0d5a63a2b5b59257ebc976d3c09406b15fb5cb0d28b", 0x0, 0x8000, 0x7}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000440)={'nat\x00', 0x0, 0x4, 0xc, [], 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)=""/12}, &(0x7f00000004c0)=0x78) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800980000757a89cb47c2c74a158284c8e6f51c29a08f6b5ed188b5c451950af974ecf6e484257020a36ee029d0144f7f399ea28b2e30c8721da7d175e8364f5f3b626dc80041495a505337df55fc187102afb5f91603e09213265aea1185c18aeaf851c9ebc28b0c6cd7a1c6f0534be82f4373814f53a7df072148346ac4bd48a957122d1c32f7692b641cae57df664ec5c9a0df2da6e5ae6a8fe1ec5be0ae933a54b8b0e3c465c251290c69a5b8b7af2d947dea7f480637662d", @ANYRES32=0x0, @ANYBLOB="0000d328fad32a5568f4ad08e3ef783217040000000000d1a1a1005110001ae03600088005"], 0x38}}, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) get_robust_list(r11, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f0000000140), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f0000000280)=0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 16:05:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x9, 0x1}) 16:05:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x9, 0x1}) 16:05:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000000)=""/232) 16:05:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) dup2(r2, r1) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) [ 1359.332214][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:05:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000001080), &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:05:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x9, 0x1}) [ 1359.471170][ T2517] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1359.711115][ T2517] usb 3-1: Using ep0 maxpacket: 8 [ 1359.911901][ T2517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1360.091153][ T2517] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1360.111057][ T2517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.119717][ T2517] usb 3-1: Product: syz [ 1360.131195][ T2517] usb 3-1: Manufacturer: syz [ 1360.131210][ T2517] usb 3-1: SerialNumber: syz [ 1360.136429][ T2517] usb 3-1: config 0 descriptor?? [ 1360.371255][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.444260][ T2517] usb 3-1: USB disconnect, device number 19 [ 1361.221021][T28312] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1361.411138][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.470980][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1361.671185][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1361.813665][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.851158][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1361.860356][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.871270][T28312] usb 3-1: Product: syz [ 1361.876053][T28312] usb 3-1: Manufacturer: syz [ 1361.881751][T28312] usb 3-1: SerialNumber: syz [ 1361.887381][T28312] usb 3-1: config 0 descriptor?? 16:05:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0xfdc, 0x0, 0x3, 0x1, 0xbb9}, 0xc) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) 16:05:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xe, 0x9, 0x1}) 16:05:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x40100, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x86080, 0x0) r2 = socket(0x10, 0x80002, 0x0) close(r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r3, 0x417, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008084}, 0x0) 16:05:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x140) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x400000, 0x0) ioctl$CHAR_RAW_RRPART(r4, 0x125f, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f00000003c0)) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x1f, 0x7, 0x1, 0x4, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000380)=[@timestamp, @mss={0x2, 0x9}, @timestamp, @timestamp], 0x4) openat$ipvs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000400)="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") ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000340)={0x5, 0x0, 0x3, 0x2d, &(0x7f0000000100)=""/45, 0xa4, &(0x7f0000000280)=""/164, 0x59, &(0x7f0000000140)=""/89}) 16:05:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x141000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10201, 0x0, &(0x7f0000ff9000/0x4000)=nil}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc9c1625ba18b9966, 0x0, 0x6}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x10) syz_usb_connect(0x0, 0x1b, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xab, 0x39, 0x36, 0x8, 0x7392, 0x7811, 0x8315, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x7, 0x90, 0x8}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYBLOB="c7ac993d50dd4f847ea677482480d07e17390fee594191dc492b25e2ab9fb8fe4dc1f3793f48763cc0ce9d702d77dc59b497729e5ada7c2c181ae2db6d93aedfcd9c7b27d525314acc88691960a23d3a9295bf1643fe7b29869d1663ec397073ffdef8770f3489240e7ab57d9e7fd25f61cca342031ee7d6017944fafd73930dc0d8471cb96650d7b500b0939594a205a8cb76d9100aca832e535b1635b097e019ec93d75299fad55cd0460d78095a89050e912ba5749f78de87f917375fc68abae11ecb4ac6a680cfc392a9a3e6b7d0f20ee371e3d72316bd283c743198e5ef3c9766abdcc9b26abf78f88b4ca229f1dc9f89ba06223ac51bda96dea907d3c5bdd3a7b94a42174ea398f2eb0e6123216dc126400ab3fb5b117b9a27b46829b686d35db4561b0745a89e9120142052953d0704649023cc0ea014013683cbf505a2f1fb4d784d0eee18dcb576b0d5a6823a7ccc3a91ea54f5eaf91a5e49111fc0a09edd59ac33a36a1eb66b315a4499a55c70ea86a3a0086f95e852c29be12ff4afe22c0ff71ea9a001e1064b5dd5ee52069e10718d78909bffbc8321a2abbf8efdc277faf62ee452a9722590e6d57a4df719f88863fb5888ab94290b34d942e1afff136134639321c741c046372b737749035b2a6bf97efc979fdd411256b74b96ed77ed43999421d8a7fceb95260c2f1cb73071217d152f2ecc4fa687cda2ba94faee1e3205ee6c9149d671837796c358fa55b86d7960607c70ebb679ebd96f6985e70db2386d49be377aa8349d90532085296895dc6cebadf6c034a1dbe723ebb526eb1f40a5ea99eea8f35067ed3ba6dea86940aecad622b3e387de3fb56e2fd4b91c17e06fd29b61413edf1a8f37faaf8c379a3d0fec95449816d01343e76750e92ace19ddc93e3359803a773be38b218187e9734ac1bae3bd74de0cb5bbef81c6e596bfc25d2468d6e3c3e0e65223bcd9bbf872576af0bfd511ca5648792cef9007bcec1f67026112c88b0639a3ae534216801b3a949b0b3cbdb9cb39344f91201591bcd034fc483273d6b45b5f170cc788f70d1dc37534be319c2c06251bb08e830b1c52710074dac8b0e257a8c826259392d27eccf38b600ed04a0251a576c5a07e13f92f240e198f9d31bbcb7e4cf7cae5d64e2b71faacab41198dcdeb8730063247472b64a6820cd6caccc3c3746f2d0d5906c1c530cd52fb232caa0f4e98f2ac58fc6e6f149ef2e80161222f5614c3d0133c804e3588f6a709d1160a5764e352a282b88b2664ad3622a980ee6cb47a4d9a287ddd3f6adc4c2f7dddd5876ffad4f862639e705a6d49858ef038bbbb57d0ebb5ac573ec720f4e3a186f1011585ee9bdc76215bf1305664fca5e9177633a8c55bb54f5524ada9bafae886db63393429bb3c75a1579993a81d3fd25f02ad8d2157d0f17f69d51f954358228e06bdb6dc60c6369ac4a406167afe3f1338f17f63a5fe062a800ea2f2c407a8dc8759f725f4450db3d1973944c14b5400a1319afd0f91cf024f2ce5547d52b9f5393a647af727d26de541d14e48a9841cf85184477776f8b34d09da798561beb192a233fbc5980a9ca150c991e784a56506056b0cb979de5acb18dec271caa81763c6fc3d5cfab8c8debc93385cf29b34c0fac0bf8d30af4b5b06881d4694361557d3bbf385c16c8533ba44396b23bb7df0afa89fcf841682f738adfff3bec4f1d8d3373fbd500e987da63a841a9b367e38b0c2fe8872bab972c243994b64f5d341454d868f99e8a9d55f24e59e860a07624cad7feb761f321636a549640dc19845996d507f7b39c7632db606e86614fb4aff2f0e4750860bac8efb4f90a7edcf1bf5de9fcaa86018f20c14db96725aeaf2077531b98f5149718b63727810dc741532ed6b320cd9017625e141b4945e807d3148813d6c5c909f826ed8746459139f036ed6b877ebd37cfeec31214e87e3452575b1c8b8236aaa729bcbe28cfb6b058418653cde87f7e96849998eef169fe2489c4b68cef5647420d621054879cb3bf24208ebf1d6315831d054e10a09a642652dc1b54bf139d82ede71e47a7153709d08a50d3e98b574e03a0e222314d8b5a9e673c00c86968e24af0b9a25f39b618a5344b713981f66a8e5ed1a39d1a94e8fe075046cd95386218ea1c2740d790237450fe28ae77aa060bb34399cc97def168422fdd6b900e75711578cd9672a80399b0c8468ab783c03f2f8f47abe6403c4bb39541afd84c59cc70fc41c4ebd242731316d2f31a9e3053380b24b70df22a354443b238c43d796bb2499d723653d340da84874072135a598e9d6b37892051f6713d5bfa26be11ff1b138c92a0f3d3d4b6af7d66cf502e4b65c17378d9d9c9f8228f60be1d723cfbdc6eb47e450da47c294733b3cdba6466e1eca8964711dbf39ba7ee3a5243b32ab56b5a0bb9b497661f35abfe7938aa1c0c5f589e07759dca9c21eeb9864cd53a2abd9cb3b789fb1e7426e79d46553225c0cfd355ab395224ae175665ff325efc62b81514e287d0983663770f20d0dca5bfac57df2fe29abd61493f90cdeb24d60aff3fe8ea150275642730b6f37a722dc2cf2c358a0db4337237e3e211e3a809d3e5dea4dffa9504a4ad33dc3d3e3ea816595ce24b00ad1a61da78d6148df884e978e73e4b67890f3d3c074eaef708d9ca48aaed26d646d4254f9cf80b3af31f52890c4829387e3be32bb35d79478f6fa872492b41c16b26e05fa491fde8065562f6df4aba3cf8a0bb435cf0d57fd0410715a4ac7628123c80001cfcbdb5d141ee283249d04758b96f2316ab622222763cda43d8401c1be2829ac7d299105256da252f1f4e5fc7141e6a0a6e282cc17ec309aef6b1dc03cfd501164dd488529446154770095a5d72a35d24b97b825f644a8368af7918eabcb38b129aaca3beb3b3f7437d1629b3250e3522caf81beed5c82d207d7434b369b164ef9a1fe5b572d7651e55eb92a2e87ef37175d88c71f6db8772e949b8e89c64eb7ad904af5728c43daa24826e750e189a78e0801a89abd883457f0d4ccfdb3f1aa7a75d24781e4297ef2d953a7ff7ac6bda447bcb7a229eaa24e288658421d124cb8ba9d313f05bea47250d94448e3dc342bf303e3b4e6087bddd3ce4723cf46d7c113e4edb928aa497eaf05968fcc117408f00180f5fdf595fbb6a223dd9e6bb1d3d6984113d89b97ce4cc13e0c2920ff19722c75bc8284d9e08e91857e9a37f1817e065289ddd8777f40466483d0708b4d3f838ff3480eebb9e81e54df91a9197870d2ead14cfa48f1264107ef9f25f798bc356cfbb131c854ae2a3f45f46fcfeb907dd46098354e0d8076f532790a90235ff520b8632bacab99f4dc750ffc55960b83778d4bee09c55712a511f0fdbfaaba9e14506c51c1cca071d1be647583b36dba4f084ab086c2f940fb234026fc19b11cf423aed7ecd692b496de23f804dec2823c54e086d4f04dd2d7a28cf050108c9d87b2a59a8dc8225babea658b6a9673d28c324c747c5f944c5f3bf78fbbc2b183728a5db3581beb1473d9e4c5e1f5bca032761e8dba188f3d85e10f59a188684e8f3c9bfc2e4ceb6374ad12236a1ff7f391ccebef7985835e1b9032cf07ffd97c0a63fb38233fe1c2692d84d14057289d98aed5cb3389bd5ea9ead1c313cf9b92fa4e9ef037ccf3e80030184ba3212ac15ad99e0423bd3aab9c802b9416b26e5d95c1903325b92b41b2f3828a6e6d6ce41e651ab8a2ad413ecb06aae248ec4e3179bb3681790157e5bd7049a1276974f68a4f90e188922e3ca322a2b7a233352ba8ab8b1db85d054477973a8e209e170d73229affbd4b90bde31ece5a0f62678aa1a90c58b5698bdc5c9df0449ee05a811013f67f3dd5ef0aab8c740d1a72981c6d49ba80cc6d346149122ca10a3094f80557b3dca5316f9214ed9fa16a28b173435b60c0dce39ee780a3f45b125b25998d95fa3f6f7f252fab5889464f5d22dba877d567cd4c54cb82ebd70a911ae4c735330d44b6d3447851353ff9d93058a99395a36ac7ea2be03b48568297e968dca6d3ea35bf838e31f429501765154da07edc5e78e5b14ebf2936b81d1594b8c1e6729a08b265ff90c482630ed8aef1fbd7667306728bcb951d5dafc35bb8bf3902c5b57e73a0425ed45d954139e39ee1f13b81583637bc6d81979271a332b0098c40e0d92b38d3fb77f1a1cab17f9338c5d74e46ab563f6c32f31b23f11be5df17ec98151e0c7b30ee4c9bafee587e6fd17c65b84bde47c1c91002f8c1872de724b7fa4042c5ae2f848a3828babb4c891bb32ea0b237e6057138e5a4802daaedc724e235b129b5768a0d94446c9ef8ad4c3230880891dbd11a11e4f4dcc22fae0df4ec52c76199b306797a92cc429e565193e66660a2e7b85135fb20ee96d18a1fb1235e835727b1c24aa2f70b0037f81842d01981aae703df064cbb375c09de6c6accd7fd69106a505c06bf1cef10c324e2abbd47942769bd4854a365004b89a9ac32a78f2fea7480ef21c393f64bb987a0b5ed4b6688428feda8386264a5f9bb9040a41670e358eead2ca823128f45cb1d730592567986eefa7c0f371e63b19de08ff1f3ed940b72dcd6640f3f4c5f9a4d6e111675f139a138eec219634f08be615dee4a7a1aeae36bc8a42bf6b3d592afd5b29d480a25c6be1858c6d2c8bfabb6b3eceb42f4c9243f93f507e7b74c97d47c979e3c0612137b513224c72008c143b16d5df89c865e8e1efe6674df9df8c875b8bffbc3e3c5321b85c2603aa4ad046f8c98d035fca5f1d665499f0a14e68072ff41223ea854b6a6b4523199c58d13823f98a7d9925b694d9b185937b15642d1992452349255276697da01b646f6322762908c0d799ffd412ed4bea9df1e4d17fa91ba1025bdd772b8acfcd3f28c71d67571d9987d6bdf050d4eb00423d61908255565300c8fa6ca423ddbd376b86525266b92e73e09520854be28193a1811e6017cbe83b26822a0311ccf794e2450cce2b258d3c696367928a6b74441443fba932607e79b8276dd6bd7db003f15738900eb714381176889cad85a0b8e97fafc5f422baf27bc3f638410edc6ce392fe99aa3196df55faf2b3f8ba336f18526fbfc4ba4b965976086df86935c0354f209b77e6d2b476dfe5ad6400eea5657dca422c37fd5a7358b965792f48dd238c8b52329f798c9b5e8fa13534bdfe6f7bd9c8ad07378f4a4405d2a5e480745a6429498fbbe063a0bd0b932d9795707d9dd98880478455fae9a1d30c4a548c99141ab9b51b96cd3705fce7db8e4f4ec345c8b581f58dc7883b89a3c6a578f718da2f1068e66d080699566e7314e9ff75964226dba93fba5875df56e5409b2c3e74bb87531663303a189e63328688800efda3e17483a9a63b33f6fdc8c4bb0ffd185e3d1040960d548ae1e007d6721cb5c89791c5765f7327b9377c1e83b0ca86f26ebef4cd736220492a373c45c4c611ca741000f95530e2d4d7244a2daacf553e2144676668f9dd15f04b2d63969efb32aa5a7008893f206865721a809ce950c0bc89065b848fae7c8819d3e494024a6b56053603009ac44071b1fda7354a02aa92af9836dfad683c33ec39f3de5ff0d1bfb5493bea1cb6c27557c93131d050c496931583975ea5085ff67cfceba2e490341edbd9061c189171421af52a98100b69b23fff9eb38e1d154b395a209e6b35f3b1658c2f825a8cf2c41e8e794952981c6b3fac70c9aa2c88bca2cfee9d010ff454a30428cf0db13429330fc5a1472c54faff0e1"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) [ 1362.128683][T28312] usb 3-1: USB disconnect, device number 20 16:05:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x10, 0x9, 0x1}) 16:05:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1000, 0x208000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) openat$vimc2(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x30) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x234, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7d}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x3f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4000}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0xf051}, {0x8, 0xb, 0xdca}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x14}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8d}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x38d}, {0x8, 0xb, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6, 0x16, 0xa57}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1d}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x31e2}, {0x8, 0xb, 0xffffffff}}]}, 0x234}, 0x1, 0x0, 0x0, 0x880}, 0x8010) 16:05:57 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:05:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080)=0x3b, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r6, r5) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000240)) r7 = dup2(r2, r5) ioctl$RAW_CHAR_CTRL_GETBIND(r7, 0xac01, &(0x7f0000000040)={0x1, 0x7, 0x0}) 16:05:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1362.372222][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.446770][T30627] FAULT_INJECTION: forcing a failure. [ 1362.446770][T30627] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.459863][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.502447][T30627] CPU: 0 PID: 30627 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 1362.512727][T30627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.523854][T30627] Call Trace: [ 1362.527170][T30627] dump_stack+0x18f/0x20d [ 1362.531522][T30627] should_fail.cold+0x5/0x14 [ 1362.536138][T30627] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1362.541889][T30627] should_failslab+0x5/0xf [ 1362.546320][T30627] __kmalloc+0x27d/0x340 [ 1362.550931][T30627] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1362.556854][T30627] tomoyo_realpath_from_path+0xc3/0x620 [ 1362.562514][T30627] ? tomoyo_profile+0x42/0x50 [ 1362.567209][T30627] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1362.572672][T30627] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1362.578315][T30627] ? tomoyo_execute_permission+0x470/0x470 [ 1362.584131][T30627] ? lock_acquire+0x1f1/0xad0 [ 1362.588810][T30627] ? delayed_put_pid+0x30/0x30 [ 1362.593587][T30627] ? lock_is_held_type+0xb0/0xe0 [ 1362.598546][T30627] ? selinux_inode_getsecctx+0x90/0x90 [ 1362.605317][T30627] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1362.610860][T30627] ? lock_is_held_type+0xb0/0xe0 [ 1362.624426][T30627] ? __fget_files+0x294/0x400 [ 1362.629119][T30627] security_file_ioctl+0x50/0xb0 [ 1362.634083][T30627] ksys_ioctl+0x50/0x180 [ 1362.640295][T30627] __x64_sys_ioctl+0x6f/0xb0 [ 1362.644909][T30627] ? lockdep_hardirqs_on+0x6a/0xe0 16:05:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1b, 0x9, 0x1}) 16:05:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1362.650153][T30627] do_syscall_64+0x60/0xe0 [ 1362.655029][T30627] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1362.662961][T30627] RIP: 0033:0x45c369 [ 1362.666862][T30627] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1362.681071][T28312] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1362.687531][T30627] RSP: 002b:00007f3337da1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1362.687546][T30627] RAX: ffffffffffffffda RBX: 000000000000d0c0 RCX: 000000000045c369 [ 1362.687554][T30627] RDX: 0000000000000000 RSI: 000000000000f50f RDI: 0000000000000003 [ 1362.687562][T30627] RBP: 00007f3337da1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.687570][T30627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.687578][T30627] R13: 00007fffd586477f R14: 00007f3337da29c0 R15: 000000000078bf0c 16:05:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x3}) 16:05:57 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffee, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4c095}, 0x48d4) dup2(r1, r0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x4e21, @multicast1}}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0xc4800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x4}) [ 1362.720642][T30627] ERROR: Out of memory at tomoyo_realpath_from_path. 16:05:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:05:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x27, 0x9, 0x1}) [ 1363.140989][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1363.300993][T28312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1363.380956][T28312] usb 3-1: config 0 has no interfaces? [ 1363.491043][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.541345][T28312] usb 3-1: New USB device found, idVendor=7392, idProduct=7811, bcdDevice=83.15 [ 1363.550541][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.561230][T28312] usb 3-1: Product: syz [ 1363.565425][T28312] usb 3-1: Manufacturer: syz [ 1363.570128][T28312] usb 3-1: SerialNumber: syz [ 1363.580295][T28312] usb 3-1: config 0 descriptor?? [ 1363.862483][T28312] usb 3-1: USB disconnect, device number 21 [ 1364.531216][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.600769][ T2520] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1364.840753][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1364.851865][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.000859][ T2520] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1365.080814][ T2520] usb 3-1: config 0 has no interfaces? 16:06:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x88a6) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) read(r6, &(0x7f0000000040)=""/178, 0xb2) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000240)) accept4$llc(r2, &(0x7f0000000000), &(0x7f0000001300)=0x10, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f0000001200)="909424b657c51ecd7a41231f2d00c914b69b872c7afcd9d66406319a058e2573e1ad7c537f63b14f7295e80d3e446c1b0d87cb5dac89b5d54cb4a39ff858e78a331f154e755ddc1ceac3fe9a2398988871145a66254b0b7bf88f26fc36cd5f0137111c309c93916e197f6313e4fcc85a58a3bcafe37fa5d107e22ae8d63b373d3aec225909f538ccdbd238ebd3e02c20df0e0d1ed2f156d7796561e3f27f7ecb7dc852faf26e9e494d4023a87768d41222820d78e3b3c3f1cd8776f7c2cceba8d2faffffffffffffffbaeaa52996fff9b2103004bd7b03ea02ce5fc1", &(0x7f0000000040)=""/3, &(0x7f0000000200)="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", &(0x7f0000000100)="11830a21cc9365ce2fdf60bab22fc22edea5dbdf102858712ab00517e58c63ca0a282599fab58b883f76662d04f793198b24a00183ea2c0c41e16406bb89915580b274af063ac758c3c5cbac9bf85ac2c1b42554cf8641abe9c8f0e3d679855e1f99996e9e82f1f52ed4785f3c03054d33da88dd09ece0dab8043a8a6fb5148be1646b0c582d328ae0e0e1f4207b30407ea882d4f52d23e356e67f66648e6cf58f11bc32cb29f167f5cfef34a1cbf07d39a693d2", 0x80000001, r1}, 0x38) 16:06:00 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:06:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x300, 0x9, 0x1}) 16:06:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) 16:06:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1365.237604][T30677] FAULT_INJECTION: forcing a failure. [ 1365.237604][T30677] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.260880][ T2520] usb 3-1: New USB device found, idVendor=7392, idProduct=7811, bcdDevice=83.15 [ 1365.285915][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.291986][T30677] CPU: 1 PID: 30677 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 1365.302834][T30677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.312882][T30677] Call Trace: [ 1365.316173][T30677] dump_stack+0x18f/0x20d [ 1365.320498][T30677] should_fail.cold+0x5/0x14 [ 1365.324669][ T2520] usb 3-1: Product: syz [ 1365.325086][T30677] ? tomoyo_encode2.part.0+0xe9/0x3a0 16:06:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xff00, 0x9, 0x1}) [ 1365.334564][T30677] should_failslab+0x5/0xf [ 1365.338971][T30677] __kmalloc+0x27d/0x340 [ 1365.343213][T30677] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1365.348948][T30677] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1365.354142][T30677] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1365.355569][ T2520] usb 3-1: config 0 descriptor?? [ 1365.359854][T30677] tomoyo_encode+0x28/0x50 [ 1365.359872][T30677] tomoyo_realpath_from_path+0x186/0x620 [ 1365.359892][T30677] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1365.359908][T30677] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1365.385854][T30677] ? tomoyo_execute_permission+0x470/0x470 [ 1365.391655][T30677] ? lock_acquire+0x1f1/0xad0 [ 1365.396334][T30677] ? delayed_put_pid+0x30/0x30 [ 1365.401092][T30677] ? lock_is_held_type+0xb0/0xe0 [ 1365.406036][T30677] ? selinux_inode_getsecctx+0x90/0x90 [ 1365.410877][ T2520] usb 3-1: can't set config #0, error -71 [ 1365.411485][T30677] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1365.422695][T30677] ? lock_is_held_type+0xb0/0xe0 [ 1365.427634][T30677] ? __fget_files+0x294/0x400 [ 1365.429700][ T2520] usb 3-1: USB disconnect, device number 22 16:06:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x2, 0x1}) [ 1365.432305][T30677] security_file_ioctl+0x50/0xb0 [ 1365.432323][T30677] ksys_ioctl+0x50/0x180 [ 1365.432354][T30677] __x64_sys_ioctl+0x6f/0xb0 [ 1365.432366][T30677] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1365.432381][T30677] do_syscall_64+0x60/0xe0 [ 1365.432397][T30677] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1365.432409][T30677] RIP: 0033:0x45c369 16:06:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x3, 0x1}) [ 1365.432423][T30677] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1365.432430][T30677] RSP: 002b:00007f3337da1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1365.432447][T30677] RAX: ffffffffffffffda RBX: 000000000000d0c0 RCX: 000000000045c369 [ 1365.507120][T30677] RDX: 0000000000000000 RSI: 000000000000f50f RDI: 0000000000000003 [ 1365.515083][T30677] RBP: 00007f3337da1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.523046][T30677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.531010][T30677] R13: 00007fffd586477f R14: 00007f3337da29c0 R15: 000000000078bf0c 16:06:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 16:06:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)={[{0x9ff, 0x3ff, 0x1, 0xc0, 0x8, 0x2d, 0x7, 0x8, 0x8, 0x6, 0x0, 0x7f, 0x7}, {0x61b4, 0x0, 0x7f, 0x6, 0x48, 0x3f, 0xbf, 0x9, 0x8, 0x20, 0x6, 0x0, 0x100000001}, {0x101, 0x5, 0x81, 0x80, 0x2, 0x7, 0x0, 0x7, 0x2, 0x9, 0x5, 0x9, 0x8001}], 0x1000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 1365.572098][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.709075][T30677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1365.810953][ T2520] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1366.060814][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1366.260787][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1366.430826][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1366.448257][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.457917][ T2520] usb 3-1: Product: syz [ 1366.465778][ T2520] usb 3-1: Manufacturer: syz [ 1366.471319][ T2520] usb 3-1: SerialNumber: syz [ 1366.483464][ T2520] usb 3-1: config 0 descriptor?? [ 1366.620908][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.763423][ T2520] usb 3-1: USB disconnect, device number 23 [ 1367.500702][ T2520] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1367.661232][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.740687][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1367.890839][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.942499][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1368.111144][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1368.122705][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.134263][ T2520] usb 3-1: Product: syz [ 1368.139132][ T2520] usb 3-1: Manufacturer: syz [ 1368.144828][ T2520] usb 3-1: SerialNumber: syz [ 1368.151890][ T2520] usb 3-1: config 0 descriptor?? 16:06:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xf0, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x3, 0x9b, {0x9, 0x21, 0x101, 0xf8, 0x1, {0x22, 0xbffc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x3, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9d, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x2, 0xff, 0x20, 0xd9}, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x0, 0xf, 0x40, [0xc030, 0xc0, 0xf]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x445}}, {0x97, &(0x7f00000002c0)=@string={0x97, 0x3, "5ac0edd7ea6f098cd5de47eb3786053876a1cf603460fb92b608af933f97e950009b0eb1600cc802466d965ebac1a6538b3e9c37e89794e65e46632f90d9ae42272b81e622f6d7fa05152b590dbb81f5a063d720dd1ce7899f1cdcea07abcb0f3d630304937b82731093160acc33e76f7c3e33d682d9b41ca6bca614af5e8a8b330e4192553f98793c854ffd2fc3a22ad62732a5dc"}}, {0xe6, &(0x7f0000000380)=@string={0xe6, 0x3, "e9792143603165f42a37101de0703f796866e5267725b641b707946ffb73e25dbf6a72df78baae4fce9d3793e46ca3ac55f3cdbcb4ebd557681a1030c85e1b58e5eeb6438237212a1d589d08ecb8bc8787295d854a2f9d141a47951be141680aa89a873c42a3a45cf34447daacb17850bc5e1de8d20c4a395a1f54f7ff2d3fdcd067d26723d8784b0426bdfc04fa5af767668f59461680dd3111088f37d1dc1882f520c0204932a28613be10636064190f7a5214dc266aa0a4e1856da4bcaa2a160f92390d731b925f65b0a8af50088ecd823127e18806f98128928d6ac84c4969f4e6fa"}}, {0xc2, &(0x7f0000000480)=@string={0xc2, 0x3, "554eb4ba4ddb81ab6d17e61cb69acb4ff775789158b6451d9bf5e0d865ede709822d47499a06538f4e2d77633e4f3bf5f9c399c391378210a405dd6b975923246695de5f64c257d0c6fb6aa7ebc5bf4b05f027d6ece7ea42e0194b5674660d060b31392a88d60574999c5e09313f6c1119324829d177c9ae1d550825b686f93191b9440ad61ba3ebedc8702c3bad67660ceafbc4c5e2ace9e2fade5ab468498b823e74f5b40d586831912b1c6bbf27d4e88789787e4a757b721f08915ea9612b"}}]}) 16:06:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x1}) 16:06:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 16:06:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000001380)) dup2(r5, r4) getsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f0000000380)=""/4096, &(0x7f0000000040)=0x1000) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:03 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 1368.294199][ T2520] usb 3-1: USB disconnect, device number 24 [ 1368.396801][T30747] FAULT_INJECTION: forcing a failure. [ 1368.396801][T30747] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.449272][T30747] CPU: 0 PID: 30747 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 1368.461310][T30747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.472469][T30747] Call Trace: [ 1368.477232][T30747] dump_stack+0x18f/0x20d [ 1368.483061][T30747] should_fail.cold+0x5/0x14 [ 1368.488795][T30747] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1368.495484][T30747] should_failslab+0x5/0xf [ 1368.500003][T30747] __kmalloc+0x27d/0x340 [ 1368.504263][T30747] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1368.511211][T30747] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1368.516611][T30747] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1368.522547][T30747] tomoyo_encode+0x28/0x50 [ 1368.526986][T30747] tomoyo_realpath_from_path+0x186/0x620 [ 1368.532640][T30747] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1368.538122][T30747] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1368.543778][T30747] ? tomoyo_execute_permission+0x470/0x470 [ 1368.549601][T30747] ? lock_acquire+0x1f1/0xad0 [ 1368.554293][T30747] ? delayed_put_pid+0x30/0x30 [ 1368.559102][T30747] ? lock_is_held_type+0xb0/0xe0 [ 1368.564070][T30747] ? selinux_inode_getsecctx+0x90/0x90 [ 1368.569539][T30747] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1368.575090][T30747] ? lock_is_held_type+0xb0/0xe0 [ 1368.584377][T30747] ? dsp_cmx_debug+0x2c2/0x46c [ 1368.589163][T30747] ? __fget_files+0x294/0x400 [ 1368.593876][T30747] security_file_ioctl+0x50/0xb0 [ 1368.598836][T30747] ksys_ioctl+0x50/0x180 [ 1368.603200][T30747] __x64_sys_ioctl+0x6f/0xb0 [ 1368.607811][T30747] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1368.612946][T30747] do_syscall_64+0x60/0xe0 [ 1368.619074][T30747] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1368.625067][T30747] RIP: 0033:0x45c369 [ 1368.628977][T30747] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:06:03 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x402, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r2}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0x1}, &(0x7f0000000140)=0x8) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x523001) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000000c0)) 16:06:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x5, 0x1}) 16:06:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x42c40, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250500000008000500e00000022a000700753a6f626a6563745f723a6170705f646174615f66696c653a73303a633531322c6337363800000008000400e0000001050001000100000005000100010000002700070073797374656d5f753a6f626a6563745f723a666f6e74735f04616368655f743a7330000008000500e00000011400030000000000000000000000ffffffffffff2d00070073797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f72775f743a7330000000001400020000000000000000000000000000000001"], 0xe8}, 0x1, 0x0, 0x0, 0x8bd8f7142a82aa74}, 0x4) 16:06:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x8, 0x3, 0x3, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x1a800, 0x0) dup2(r2, r1) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1401, 0x10, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000011}, 0x55e6302e61f56e7c) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 1368.649173][T30747] RSP: 002b:00007f3337da1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.657808][T30747] RAX: ffffffffffffffda RBX: 000000000000d0c0 RCX: 000000000045c369 [ 1368.665795][T30747] RDX: 0000000000000000 RSI: 000000000000f50f RDI: 0000000000000003 [ 1368.673794][T30747] RBP: 00007f3337da1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1368.681772][T30747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1368.689744][T30747] R13: 00007fffd586477f R14: 00007f3337da29c0 R15: 000000000078bf0c 16:06:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1368.716051][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x121000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 1368.842056][T30747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1369.070654][ T2520] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1369.320722][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1369.520639][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1369.680609][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1369.689720][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.698563][ T2520] usb 3-1: Product: syz [ 1369.703366][ T2520] usb 3-1: Manufacturer: syz [ 1369.707956][ T2520] usb 3-1: SerialNumber: syz [ 1369.714257][ T2520] usb 3-1: config 0 descriptor?? [ 1369.740766][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.993081][ T2520] usb 3-1: USB disconnect, device number 25 16:06:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RREADDIR(r5, &(0x7f0000000040)={0xa6, 0x29, 0x2, {0x5, [{{0x2, 0x3, 0x4}, 0x100, 0x6, 0x7, './file0'}, {{0x80, 0x1, 0x7}, 0x10001, 0x1, 0x7, './file0'}, {{0x20, 0x0, 0x6}, 0x2, 0x8, 0x7, './file0'}, {{0x1, 0x1, 0x4}, 0x3, 0x2, 0x7, './file0'}, {{0x40, 0x0, 0x6}, 0x0, 0x7, 0x7, './file0'}]}}, 0xa6) 16:06:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x6, 0x1}) 16:06:05 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:06:05 executing program 4: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fanotify_mark(r2, 0x10, 0x28, r5, &(0x7f0000000000)='./file0\x00') 16:06:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x8000], 0x1, 0x1800, 0x0, r0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) dup(r0) 16:06:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:06:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x7, 0x1}) 16:06:05 executing program 5: mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x6) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4001, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:06:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1370.770878][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.890522][T28312] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1370.931328][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.130421][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1371.330569][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1371.490890][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1371.500050][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.508878][T28312] usb 3-1: Product: syz [ 1371.513616][T28312] usb 3-1: Manufacturer: syz [ 1371.518243][T28312] usb 3-1: SerialNumber: syz [ 1371.529156][T28312] usb 3-1: config 0 descriptor?? [ 1371.812736][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.821416][T28312] usb 3-1: USB disconnect, device number 26 [ 1371.974155][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'team_slave_0\x00', {0x4}, 0xfff}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, r1, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x258, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x258}}, 0x20000040) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x2, 0x34, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="050f1700025af681da1a8d997b035d1ad8683b9fa3f487683113efddc36d50326175d7cbe4f82716339b129a28f49b865db8ab2a349233cd824e54a8e432948b4991559f0832df5798c484a9b0306e6a57c58284af837b9ca16af7ab0248cc554715c5549ea6f8b9f000902e856ad1154528a6ec79fd7c93d8bac009be7f88b47fab541253d1e14d0c4ea682caeedb688c9d5e7fd8e79a93b7efdde1c6de452b29e8ab4f165354f82f612b47"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8, 0x1}) 16:06:07 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc0c0583b, &(0x7f0000000100)) 16:06:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x42c000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x2, 0x0) 16:06:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0xf2ae}) 16:06:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'wg1\x00', {0x2}, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="030200000000000008001d000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="2cedeb01f0eb452ca3e0c42a2b777b39294fd443f7f6c72dbf8072db7160514e7cbea0de4beb23d581b9702753913b17f4841c1c29efc67d3e6ee65edbc30ed7960d040c3fb3d9a8cf801c436f40c127979fe1dd8e014766b55c95bdd2197cfd9ce848ab04af6ee94a21131c2fdc047ec2621c37aaa44a94bfedee31fe5f824b8b48178cea1059ce1db48b8f6469ed97f2"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r11, r10) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x14203, 0x0) io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000000380)="4e1f0bc9326a53efb2ab06e838dc924b1a14d1b1b021a1570cc0777cf437fcf7213802b17b4672cafb8bb0bbe85423650c36dbecd419569ad9eadb70a3a65b39c9c9d18cce8e386fb05ee1ed12783d25e4cca4318f1aef8dd8c311d4fd259c061c8b0ea71fb5c05336a0af2d54b1495c0b", 0x71, 0xffffffff, 0x0, 0x1, r9}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r11, &(0x7f0000000400)="d18d9f93c8aa01513830c3897410be323b25eab4109673560148ef605bb559c5954598eed1d7550626ff914831784539da33", 0x32, 0xffff, 0x0, 0x0, r12}]) 16:06:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0xa, 0x1}) 16:06:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x10, 0x0) 16:06:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0xb, 0x1}) [ 1372.754870][T28312] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1372.850815][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.030390][T28312] usb 3-1: device descriptor read/64, error 18 [ 1373.430358][T28312] usb 3-1: device descriptor read/64, error 18 [ 1373.700293][T28312] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1373.896558][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.970356][T28312] usb 3-1: device descriptor read/64, error 18 [ 1373.981064][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.360324][T28312] usb 3-1: device descriptor read/64, error 18 [ 1374.481568][T28312] usb usb3-port1: attempt power cycle [ 1374.931105][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.190283][T28312] usb 3-1: new full-speed USB device number 29 using dummy_hcd 16:06:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_INPUT2(r5, &(0x7f0000000c40)={0xc, {0x1000, "994f5d012084cb970a7232314f07dee86686070cc289c8bf7badb7bc36069cf65129534452a81a1d338c12b3701cc1269a0c02c71a6e1c232fad44236137a867f79606374f8d0599b9109c53b173dfbb53aa83f6a7a9e8a7a460e4be5e881e74de1fb7f3a1667f0346d117bc7f0862cbce6e8fc52c0a18f0cc7b0b28e1bcf0a9ec46a7f34dfb994997d7b517ee46c3271e713933ea47a7738d5b91a7106031ceba4bb5284246c0891f3ebdb6f3373581a65cc93ab9b51b9c46ec739ff883660dec9e5d25456d1dcb862c4e7247131577925c50cd5d9df78f773a95fe71819f91ff017a54c40bdd754dd027dd9e874bc0acf14bac0db1e6914295982961daecf24230ebb2c16a0518dca86aeeee8d278469a25447cd52bb001e2df369d88dd5cf40b50035ead8255da53e6f02a6a08a2fe3084e43f72989081e9deb0ba57f8e3a6f9dbba4406716b1ac7b9af537bbb08863c3d3363f7078a7d884a68277f2a571015cf625c0d2e4a0039ab42b47cc95b37cedfdc2cbb73b287a9616ae6638909099eb4c29ca36303ecbb707eaecfa5552406a53aeef48416e467f98f8d2287581dd1c6ddc372fac38e02868cf0b2353a21db62a3995c3baa9b00404a8fcd9efae6ce782a2e5f690f704372e4f5e539786d4d89bd1ceb0eccc2758d6739b6bc18eb8d71a5d91b2e20bbd52bb549347fd737f40415ef6708c21cc2684df90afb38922d4d91386051e6c3602a423c4db4e97e72521ef16a33f0ee556cd8249b4ae18eca2e494a9940745e6545e6d72f8a41d9d8aa6a0585248ea108af8f38955f4cf5eb52e0ef160449dbcba7379cafbc89be854a66906eaea5122a7e0dc80fca949d7c1c4f3ba0a0783190ab6f68955da0bf70868b8af8992604dbb56ea31e4c2e7dccf324f6be6d46eb48d4a86cb275f2b9d9cb26698e7595fec0fda682195614ce947a1a33cf4e2fb7fe3d3496bb1e3c82b6013158620d65099c5e7c7572a9732c1d4a9cb9f14c6017ac7c084b05ea4bd1dfbadaeadfde75c721060100c4ffc83cd7ccce9cd68fa83a3dd6fc5b95e92dffff10a05a4392570674ef9cbb5c516b8be346983a5b6f9ac608adc7817c53059e6eb0e92c9a1a16459a9a29da72be93a35454b675d336ec63b33c915955f2b40753c6f4132a0247f7f7c53d0ee118aa41f17de6bab36c796ba3768977ad416a0c1aa623bbfd8f1873254e3d553b6ee0bccd40668d30b02c6fa8c95cf69a88013ec2c099245750b26b10c738e845e241bc1f83e5391d4e6389ebcbdfc8bbb13a6ef2b122979f5eef30ca099ef055961cfc95840f3cdae9805db86051124d11dc510bc7ee013b49cba7f26654a3c1022e4252286d3e86ac0d9ea4df12e93ecdd1420bf977583da3d4198917526bd41ef3ea9692578e5dd3cb31379fa4d0a62a13ded212abb320fd740033cd541ed2fe070fc6dce423451720698cf1d04ee0867336ee96dfe475f5fa9b06432d95106749c41688ef4895998a69c88f900f03eb1bd13d1171a1749ff951e11a7648057ede3188f9a01f415ace1d13ad0e618ec8409e46076d5db385793bc3f17f8462e5e39749abee840de44278ad778a8b1a24ed630edc41d0b131ae71dc70fdf8317c06cb5d1c1b3264dbbf17a107ae687287bc1a5689896a5dabff7c297b047527f8b725c1d390489bd92aaad801963ebcef54a236fc246deb8ffbaadbb62860ecd1bf587d5af38eb1b38b5c5361defa0171c1aed8edb365c7aca0e954138231256d4bae3520e035b5849f1cee218414e1c6c8cda5bcfbd5f3e3d28c3eee21ce26baf8b848fc466b0140a5723d68641f2d0f70bd00f8354620aa10bcc8097742e863b290818b40d130d60da7170e9e338f6c49197ef173cf270b60bb7fd98054fedc27f3adfbbe48212cda3738dd661c31336edd523953f3b1a85132fcb0686ab2ea4433e4ee31b8cd5e4b81e99b72ebe76884525832c878ae2439ed02c741fd39adc841b7c54215179d9561be7dca43faf5836a92412f4544bcc3a6dcee068f712cd9ad984d344cc6c717a2f2a2e2b1c69204d1dbe59f9dc7a45c5ff91556d19dadac11e2ad79652e07ffa47438bcc2f8fe108229167f5aef641e9c239c5a14dc432dd122be16d0a43b269ca533ec3df26fcc4e6f67b87f84a4c559167d11e9ab0ec35e51a4f9d6cf84418afc90006ed0031bf470270d81b4cce897d8920c25115b51d2e57e26bbf23e48c59bdae2a610c9a5be89f8e38e7504ef86ce797a62427346dfbbd68fd192f23ca84b24ba267f12ab0a0649bedf35a53d0df48cec390a383325ba465c990ad201ee34ccff58f1362132cac4d2a7bec7f951d507209353313c9aeb478b5e12389df26ca2c655d8458ef5532966c6b510ff767c34c5dfb2d9370c644250709002c9e753eb4f8557c1cb1fb5059ae7c24002db9462374597ba295e8dba799d721a2cf9d7739060f67b00aaee248e2a96cc89dc256220fe4effb96d9e3448e4269e8bcf93d1f4dcac986d845abc18647ca3a75017b9a91436b9959e220fb05458bf5fad5abcabded8ffa10a5a7612d566cb3f1d4124f0ed409f5b895f73b5cf3530294c09a78c0da6e2fa2ab098d3fe68a3179ce92e1c18135c77eadf7a3ea9030421cda8528e5c391b40fc9ca7ac83b5758e7b867ce2e0d177caf3f64ca4c01feb176a76589c19488af5442def9c7d332b9ed9e7bc1fe7cca3d6a2ce1b96038dcc6f0050634aa00fac4abb9c5f06b26972e40ddbecf7c531f0492cf1117187e38f482853e250f71321a68935b8360218e145b697cc46027f9bf5b00de6ce58461dc1ec67175e2ebe1c0c8181462317c1abf73fb11960ca1ececcc860204995c82c2e4849efb62be3d26a5bbebd798d90fa4558adaa6165f97645f5c18ef8ef3b8446aa02fa6b7fb63b8b6173b19d77f8b50f58b2b18e498c750193a7c3eb30dd566fb345fde7e9db5111749fcede952353dc5cd863cc5850d4b41cd8d76988298f3fbcc0d56c0e87efaae75297e9b35dc86d484aca3c295afc79a291868e6c1806f07b0b86dbc2e3fd6c4b2af3ce698d0882e00c828dbd749a5ddab244ab8eab8bf12aa4da6220b1625260aba19a1b086d533d79dac58d23567c06821c20a9a4a61b3f32960376d7ecfa4f76bfe0b72d109d4ca5401b5b2f465760cf924140e42acf8a839725374890dec074d09e7d103f6f96f397bab15feab6e7c91ca445505fae53d2877f491fadb41ff1c6f6feb6b7a2aa7d0fcf68f51aeece9e1f3e19905ad1a943fd2fb937c495fb0b6c76cb3f3e6feb0c3a4ff329ef8a092bfd5f1f9225aed6cc532284c48d2fefc835fe720d6722851576ec36e994ceafb8e8b30533bf13702edd3068f0be591ed8f14be62bd0ef476679f992b82d7dcce702ec4272ad65c7f4f6a91518fbf6c428b45be527471431900c742c624f76bbcee0b303a9b6548c97889024906eb51e7386431421b318ea58b0f2758d395d31dada5aad2f2a3afb800826fea8644318ae2eafe61f3311a1ac2576e4eea2e0f08c1b700092348b1395415963e6249a75405c0f846c72f4b736938ee1eb2f43acdc1ad42c498f4fc00a3e37ba5d9a964346cfdf1db8346d8a40da5cb14958cab521635eea8dfeeff68ccdf6d29a9ba41476d41146fad61169759a0faf552d7493e1c9c4ccd9012ad6f26a58fe1f36611b5f5f0510bb89556ff03d2d31438155901001cbc6ae3baf6c74cb92d00943f07d6d327643ff7917c11a803339ef36b42aadc1d0777a727ae241d1f9afde339ee17e748ad4f781f628797340259a1a9fae9803e5393b96fa6a3f87f64f8d73b4168a9d75e65776132ce053e0e109548b8de5dd0e7c93617fe9bfb4cf8a553810afc9c49da8758c6285c5cc2181fb1216e49f3c9ab7ed1fae2d3887f85ad25afe0bf45a850d0915248796230eddfe43ff4cc9fbeabb006dada98198c430543d8fff4e7635ec899cccc99acfcb5b00d991186f777983b3d37390105451349e43a83165122a8c0b2b4b9546a8292628f1fc73b6c8250561ca5094f09ad1583023fdf9748046e50c48a81e6ead1ba8e8c62e2a37f394656069ed27f77f764cef07a147571700827e40e62c7c343487fae8029e8c9b4c06aec1125bce4a397afe7531cf97248d0fb5da5d872c81d5139f584cbadecd841d0aa668c27bac0804b2ba0a57d48675f2906e1c1fd11bbedfe44c237d0f3d92a9957ae631fa20ccd1af5263548f21c32a4d82b8e663b95777a7c2f4f7b2a6070045eb44577c7ee14a8de1e63f98fb21c1ff01514e29acb45a9a5916bcecb76e2ec35da1bc102647af3cb35262d30d001c7e2948066a740e5169b16f5ac9a9235506c4985cc1c1ce63cf53e24f470f6d98b6d5852fc587393fe77f44345ce512bcb0863ed0d6a00c0f4ab3674cdfc64c9188567187287f8cbc7783c0da1458ac80644c18a24ca66779438f1964fa07114ca9dde43df24430cfa5a9bcd2bab5f18e816e4762ea6316df23af0c8962add246dcb03a87e5dde99ea8631923895be16610e0b14ff1758fe459f0739c09e3de4fa6500658ff98ed4b96184a2a69a04d143e4fca90eb73fbc823d4c980af75818222ad4c00c23d5aac18638d01265fa93d9cc864fab85d6925bb36b4637c3d7b0e924c03cddabc947b651d907e338e246d58f97b80c61ffc31de5e7fa15a62adb5a4d68a921ff11740f3c841384fd179a37dfe1307bb2a0e63897a51291f674198d1795a5e28f343b985d638818bd1b75aa854f2bda7bde21b9ad58b388ee1e21bd1e51dc4f3e57e0a4349f03148ca715cff3600032ffcbfd0f9f7731f504a35361d3115b36207f17842e4a788ec638ac5201d7e04824388cf034deb11e4d531fca9ccf38e1b13993fc12012b34197b344113d552b22b72629c2966c9da3d030edbeb8ff1ffd1d2e78ba782aab9fae494ea993880dd875e5cc43375fa1316a22cb65146c46d5100be6b03663562bfb7c305345091a4b0ba849214a231425b36f5f17fa5f918c8d70f88df7e19331005a75a4fb0e7f69d2c157256f757504a980c4cb65094cac84ffd08df1db7eeeed1c43309b0884b2dcc2b6a3671cc06a130bc72636d476b10291a6367e7203cf2677977425d0c6dd0a3dc19b6c05d18cad93b65c09932c6a6c188c74b19277ffed10a57983912deb4b84babd95bcd33e58d6ff86473c6a872e4e198259524cb8739f4c0aa58de775207bc0cc3533ee8849fc31aaa54d338bcb83604e477247f70791e272e8adda2e2712e3f3287cf2799e293baa82c48daaaf739dad937070e64050a539c75b3bc6648671f7c3ed14a2a0eaf31c9dc17a5209458b75f01a1a5722f8b439bc8756b9ebff2f85ccbfd5f40e3258f08dccfee8249a50bc4a6dbc701729703fc93a51071c71caf8f193fb870f4ff0d5bb540e18472e576f7f99df1551cdbf049605f4c0985d13b547828ae4607f4ef08c9bdab20d78db2a307843200350a89f9b319cc42a385cdcfae1ee414a2509e377f3bb836175a2ef3bda395fa10afcafc78a693c669de6eae452ecea9da2b57bf415a11f029c8872fede0ca4b7fc54ed994ee7848591d793e38261b40a1c70b55503a6dac8d9f19704c6bfc04fa4a496ad62e4f17de72e35c9800129e91373c790ada1bfac31662df359b5bcfafb1861aa95e47a5a806d9520a2c0bb1b866dd64f8acd43b7dcd956af4cd9882d761b009a9243cddad848c95111feff891fa2712d4aa26a432bb05fa870016da742438645b8ffa60e4e5ce718d8118ca0f4d8393ee9376e35952c33139d2"}}, 0x1006) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="40000000024a"], 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x809}}]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x81, 0x8000) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:06:10 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x50500, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000000c0)={0x0, 'vlan0\x00', {0x1}, 0x400}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x2, 0x3, 0x8, 0x6, 0x1, 0x3, 0x7, 0x101, 0x1}) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000100)=[0x8, 0x2, 0x3], &(0x7f0000000140)=[0x9, 0x4], &(0x7f0000000180)=[0x3, 0xffff]}) link(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400)='wireguard\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'macvlan0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20008008}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002dbd0000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0800050000000000140002007767300000000000000000000000000008000500010000000600400599905091e5043f9a5d6106004e230000060006004e210000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 16:06:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x4b47, 0x0) 16:06:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0xc, 0x1}) [ 1375.360305][T28312] usb 3-1: device descriptor read/8, error -71 16:06:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x4b49, 0x0) 16:06:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0xd, 0x1}) 16:06:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r3) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1375.570602][T28312] usb 3-1: device descriptor read/8, error -71 16:06:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x4c01, 0x0) 16:06:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1375.970339][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.060284][T28312] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1376.150814][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1376.310649][T28312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1376.400751][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1376.570724][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1376.583181][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.600153][T28312] usb 3-1: Product: syz [ 1376.608800][T28312] usb 3-1: Manufacturer: syz [ 1376.616747][T28312] usb 3-1: SerialNumber: syz [ 1376.637209][T28312] usb 3-1: config 0 descriptor?? [ 1376.926179][T28312] usb 3-1: USB disconnect, device number 30 [ 1377.010280][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.022372][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x24000800}, 0x2000004) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0xe, 0x1}) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x541b, 0x0) 16:06:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001b40)={'syztnl0\x00', &(0x7f0000001ac0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x6, 0x10001, 0x2, @dev={0xfe, 0x80, [], 0x3c}, @dev={0xfe, 0x80, [], 0x33}, 0x20, 0x10, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000022c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\f\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="bc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000180000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400160d000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c0202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008000000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400070096020002000006009a0003000000dc0b360283f800001f0001030800000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010124000100656e61626c656400000000000000000000000005000334f550f9ed000400880008000600000000000090a8052be0574961e8690b5fe2660944569e24cbf9b18ee6b46b345ecee25894fea761a05937d21959ee8a4a37d0948a5cbd3cd73117c2bba89dcfb873273fb7a51026d6e7af457e6dd19f1a8fc055d62588fbad3f6bfc8781f06ef6e2857b0d6b62766f001288b459c5a56b62c30d8440a8d5a47942ce58587a588701d0cc9cfdd989c801be2a2068e09a2d88603e8963cce9b98c9c5074d61d1743fa713df4fc0c3dd5b526c628337cb55a1476e5b40b43ba77f6292375eaf5efbc1016e460b4b225dc39e4270603e48641cc7e8e30a0f26690537f1ec2b6901fc39f4b4c9a5982e914acfd9a9cc35ac547ac55562038804f49df50b82fe46970583a433e8c02e93da1041e1ebfb306f44215b7f4cca9e1588e0f849ded07ae29ab172dec7cd0ca338e7786a1eec92348b14cfaee57fc8c7dfa490c5368e2250ca96d4113a04418d329344c93fb5026abae47757ddae207e0f18583abfbe5f29725ac5b2b95ca1fd3e0ced9e9175f619d8c8636a92bd37edba69a609f60111e5f029c07667e010c51041af19d00a4c4a5646cf1cfd323ac5a15d4ff2b95f98aa9ae065e3fdc0f7c4d288e22a442", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000040008000600", @ANYRES32=r1, @ANYBLOB], 0x70c}, 0x1, 0x0, 0x0, 0x94}, 0x28008010) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x240, 0x0) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x40340, 0x0) splice(r7, &(0x7f0000000240)=0x10001, r5, &(0x7f0000000280)=0x7, 0xd7, 0x1) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB="24000000458cda1ac10032eddc686263e624d933015076cedd5b4c04fe945152b11892e2e7f343668bf8310bc78df0daf2b541b9d52fd249916a4792b05027f6f48fb339bbb0c4e9953bb8196f329b3f3140b9e79391ab90cf5dfeee5aadf1dcc9ea84c958bbe2af97679cea1ca306bf5cd04ea1eeb764c8bdc0734a42fac62dc5da2e7eef0a7500"/145, @ANYRES16=r4, @ANYBLOB="170400000000000000000f10000008000300", @ANYRES32=r6, @ANYBLOB="05002f0003000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_uring_enter(r10, 0x7eb1, 0xab7, 0x3, &(0x7f0000000180)={[0xc69]}, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x830, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30000000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) 16:06:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x101002, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r2}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000580)=r2, 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd9390102030109022200010007903f09040000011dea4e0009050600000000000007250100000000d063b6007d5252964f6c62be1aaabe7fe30e1635e30dcc69ac221b698edb3228e00ead03485a815f6aae1a64fced8c38284dd66e3f9cbc71e77532af8be1d15b36d69f7fa2f98b96e939b5f09943c204102ba8fe5fac46defb12eac6e69be7bd44c2f8b156e87bbe8df9dc5f920329b4057237"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="050f17020242f10cb39481d32d360dcdb14cc8f0d5a18adae765090d283f996e6d66a46aa255d549df68f626892ff2cce2a3512b6500000000eabcfd9f4f1f76d9e54c8a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) [ 1377.470108][T30946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=30946 comm=syz-executor.5 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5421, 0x0) 16:06:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x10, 0x1}) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) [ 1377.544570][T30951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35909 sclass=netlink_route_socket pid=30951 comm=syz-executor.4 16:06:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000000)=""/2) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20004011) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc0c0583b, &(0x7f0000000100)) 16:06:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x11, 0x1}) 16:06:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5450, 0x0) 16:06:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xbec}) 16:06:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/48, 0x30) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1377.910111][ T2520] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1378.050325][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.180118][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1378.302350][ T2520] usb 3-1: unable to get BOS descriptor set [ 1378.380768][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1378.570439][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1378.579514][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.588743][ T2520] usb 3-1: Product: syz [ 1378.593447][ T2520] usb 3-1: Manufacturer: syz [ 1378.598032][ T2520] usb 3-1: SerialNumber: syz [ 1378.607533][ T2520] usb 3-1: config 0 descriptor?? [ 1378.884788][ T2520] usb 3-1: USB disconnect, device number 31 [ 1379.090318][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.630062][ T2520] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1379.870052][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1379.990118][ T2520] usb 3-1: unable to get BOS descriptor set [ 1380.061136][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.080107][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1380.130083][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.240545][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1380.249662][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.258372][ T2520] usb 3-1: Product: syz [ 1380.262994][ T2520] usb 3-1: Manufacturer: syz [ 1380.267630][ T2520] usb 3-1: SerialNumber: syz [ 1380.277897][ T2520] usb 3-1: config 0 descriptor?? 16:06:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x2100000000000000, 0x1000, 0x97, 0xa, 0x20}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="ec581257f72fe0531e60038da7fd107d1b6ab7841f9856cffb619f4110d3fc7b15a3455659f85af08768893db4564b0c018154ac5adc2299f494173d4aa165a7990b7a80ded8fd904702c510d1ab8ae655db4823139cdd5363b79e320a0d85aa9ab39af42341fb7f7fca24e73a03608c464875089171a94e3f04ba719fbe0fb7f2473f3798cdf4973d714f6d"], 0x2, [{0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="2403dc9bbfc3fcf57a5177f2e7b02da980bb089a5b135e434e7d5eeb034d8b598032f073"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x458}}]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f00000000c0)={0x1f, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000080)) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x12, 0x1}) 16:06:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x797842) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5451, 0x0) 16:06:15 executing program 4: prctl$PR_SVE_GET_VL(0x33, 0x82f9) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = dup2(r2, r1) write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x0, 0x3, 0x1, 0x2, "01e83b8e68ffcf8753ffbacaa55a77a8d0e78795292911fdd01a72638782e2298a585730f87e453129d43f03134d2dbb53022ad32f14466ea39aaebf1e6d560da5dad7b018352894e7d58050f860a1598f4e169911e406bc7af75b8f49bf82de3084c784eb2c6dbbcede3a964563d15cc78d90da8a7e6ecdb7116a3e6288e61e0a841f5c16e31d51a341ff2f61aaecb4aadf361f26167deb23bf2428649c33704c84160842102ca669ec349b89167a1ff165934f345144ad3d3a7c6b64d040c33ea7d957a95b2106b7f81ed9b4a2a339fb59638758e5876936b08c06763e42f666b10bff24a36b4b6b351e84a3147b73ee"}, 0x101) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904"], 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000740)='/dev/cachefiles\x00', 0x20480, 0x0) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000600)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000010) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x2, "0cd9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x6, 0x5f, {0x5f, 0x5, "688772f5e54124babd05ad2a7db273089a547dc9576f8d8d63d03bbf84313b1ff37bb2ae027757e923bd5fa05fde306b8c60281b7aa1fcf19d5c7a19629488e8a3a2c01085403bc2ae03cbfff89b9b05c90f74a29437afcf9670980c0e"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000840)={0x40, 0x8, 0xf9, "f1cb9bee4fa8b0c118b7798306871f3c3ee9065cbcd91461e9042f2f8c9c4d3dc19686cf9f6ab598c580b086a7e5687f75734583761e1c7b2ba5960b0051b664b347a07960c3c039a5f77db428047b386059bd712a87834b477d033549895e8aae9823919d46219c7da26848f197a79491dfbd0ccfaf95dd17936f02cc9093d183acea69f29d1fd90d19755ac7f396c6fcc12e4e045d7de8c0946ec9137cdbadb91fd613f22fcffa4fea3ca4297ab717e6bd051a87f998d52e6535404526bc9b4338319da6bc8eb9c09122bda5c92d9953a1ed19a771f1447ec3cb3571151ebf81269c5655aa3f9becdcf0f7ff9e789567ca707370db36b58c"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x1020, 0xffff, 0x3f, 0x4, 0x9, 0x9, 0x94c, 0x101, 0x20, 0x3f, 0xffff, 0x4001}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0xfff}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) [ 1380.502331][ T2520] usb 3-1: USB disconnect, device number 32 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5452, 0x0) 16:06:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x2}) 16:06:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5460, 0x0) 16:06:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x3}) [ 1380.800023][T28312] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 1381.010035][ T2520] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1381.040014][T28312] usb 5-1: Invalid ep0 maxpacket: 64 [ 1381.170205][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.189953][T28312] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 1381.259923][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1381.420380][ T2520] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1381.430031][T28312] usb 5-1: Invalid ep0 maxpacket: 64 [ 1381.439087][T28312] usb usb5-port1: attempt power cycle [ 1381.510449][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1381.570308][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.704954][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1381.729948][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.737958][ T2520] usb 3-1: Product: syz [ 1381.742179][ T2520] usb 3-1: Manufacturer: ј [ 1381.746682][ T2520] usb 3-1: SerialNumber: syz [ 1381.757005][ T2520] usb 3-1: config 0 descriptor?? [ 1382.067408][ T2520] usb 3-1: USB disconnect, device number 33 [ 1382.159941][T28312] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 1382.210094][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.250403][T28312] usb 5-1: Invalid ep0 maxpacket: 64 [ 1382.399858][T28312] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 1382.500456][T28312] usb 5-1: Invalid ep0 maxpacket: 64 [ 1382.505942][T28312] usb usb5-port1: unable to enumerate USB device 16:06:17 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x24c000, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="940000088218ef425014bf8dbf855bab18208df82fb774d40712825f0b083612de97da023dfcc2cf6c7b5c055453a5d53a077d7d86fec2e8a6cb4dfc0b04afc6514577a47a922b1e500f5b62de892cfa8e9ffbbdd34a82b15657ee27ea831a6bbeee44d442d2005716bf18de52189042f76af01032886c8b50bd592cb628c994b7818d84d70560e4b13ca4bcf853da201fc24e76e7a7d6715f9a"], &(0x7f0000000440)=0x9c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000480)={r4, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) r5 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x90000, 0x0, 0x8}, 0x18) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f00000000c0)={0x3, "43f364639b0870c48859b4e2c728fed19398a2f5c998099cd8d91101e6a0b8f3e117d68ded4ea0a512d3621b58dc282bd92bcb90cf3570e270208cac8d7e26d7830eecde5131493571daac3a5f52b19eeca4558e978411ce3df207fe7cdae7667b5fef09bf28f45085fc9edc3caa9e4e7fd41a92cd85901f47f5b225bb0ff2970396416c66bd9de1c017295ce81780de6ddd57bc49badd9692bfb0d2ee1c6f73c7f4e45bac4971a907639b64d8c02da7bbb058fb591aa6715c2edae28e6e2628b5d0eb910274cd1416256383d1197e2cfdf8c8ac05f5d73c19233b248a5d33d1769f01fb5772f23fdbea4377165a94d4af2c9f6bd05c087a3b38125ff08e04b3"}) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000240)={@local}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x5, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x6364, 0x0) 16:06:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x5}) 16:06:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x8912, 0x0) [ 1383.089993][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.109910][ T2520] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1383.250003][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.349818][ T2520] usb 3-1: Using ep0 maxpacket: 8 16:06:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x6}) 16:06:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x8933, 0x0) 16:06:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0xff, 0x6, 0x7, 0xa0000000}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0x5e0, 0x2, 0xbad, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) 16:06:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x28, r4, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000180)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) [ 1383.550029][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 16:06:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0xe}) 16:06:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1383.734637][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1383.766483][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.790063][ T2520] usb 3-1: Product: syz [ 1383.794233][ T2520] usb 3-1: Manufacturer: syz [ 1383.798799][ T2520] usb 3-1: SerialNumber: syz [ 1383.811478][ T2520] usb 3-1: config 0 descriptor?? [ 1384.095918][ T2520] usb 3-1: USB disconnect, device number 34 [ 1384.290336][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.849760][ T2520] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1385.089734][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1385.290710][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1385.329900][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.459747][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1385.468822][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.477108][ T2520] usb 3-1: Product: syz [ 1385.481580][ T2520] usb 3-1: Manufacturer: syz [ 1385.486162][ T2520] usb 3-1: SerialNumber: syz [ 1385.492141][ T2520] usb 3-1: config 0 descriptor?? 16:06:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000300)=0x9, 0x8) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd9390102030109022200010007903f09040000011dea4e00090506000000000000072501000000005ee574b332f575a87d7bf27851d9f734d5ac607acaec083b2799cb62061438e0d4ef98e4d201490bd65424a8e654f3d24a622790341e9fc18ee4be13212bc17232a248e981863e1df7f63cb7b70f1cf0d3ea26cfb2496e23996372808f4e3612797fb0a754c611d7cb"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="053c684a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x25000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000114000827bd7000fedbdf2508000100000000000800010000000000010000000000080001000000000008000100000000000800010001000000080001000200000008000100000000000800010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x4000040) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xbb26b36e524d91}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="48020000124d0d2c4b2a4fa68531af6f3b23a44ffd4d9744382f9b677d6fcd48536eb4029ced2d3feb3bb1fa385461ff920952693d8a8a98b06baf59730f795ddb6d6bbc1f2958ee0e14796d67857b1303cd8014", @ANYRES16=r6, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0xc000}, 0x4004041) 16:06:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xae01, 0x0) 16:06:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) clock_nanosleep(0x6, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x5a1000, 0x0) 16:06:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x547}) 16:06:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x10}) [ 1385.692093][ T2520] usb 3-1: USB disconnect, device number 35 16:06:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1b}) 16:06:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x7fff, @loopback, 0x3afa, 0x3}, 0x20) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffff}) 16:06:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xae41, 0x0) 16:06:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3f, 0x529046) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSBRK(r4, 0x5409, 0xff) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/66) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1386.129836][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.169778][ T2520] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1386.369905][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.409678][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1386.570187][ T2520] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1386.650201][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1386.820017][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1386.829087][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.837133][ T2520] usb 3-1: Product: syz [ 1386.841349][ T2520] usb 3-1: Manufacturer: syz [ 1386.845914][ T2520] usb 3-1: SerialNumber: syz [ 1386.855520][ T2520] usb 3-1: config 0 descriptor?? [ 1387.152367][ T2520] usb 3-1: USB disconnect, device number 36 [ 1387.409782][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.889595][ T2520] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1388.149571][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1388.319886][ T2520] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1388.400079][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1388.449716][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.458302][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.467123][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.476652][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.569913][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1388.582708][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.590738][ T2520] usb 3-1: Product: syz [ 1388.594884][ T2520] usb 3-1: Manufacturer: syz [ 1388.599447][ T2520] usb 3-1: SerialNumber: syz [ 1388.608328][ T2520] usb 3-1: config 0 descriptor?? 16:06:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x27}) 16:06:23 executing program 4: clock_settime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '/'}], 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) semget$private(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc0c0583b, &(0x7f0000000100)) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xae80, 0x0) 16:06:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x4, 0x1, 0x6, 0xfba, 0x1}, 0x14) 16:06:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x0, 0x6, 0x0, r5}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, r6, 0x2c5150f9}) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x28, r9, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x80000001}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x100}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x4c}}, 0x4000800) [ 1388.760072][ T2520] usb 3-1: USB disconnect, device number 37 16:06:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf510, 0x0) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x300}) 16:06:24 executing program 5: r0 = syz_io_uring_complete(0x0) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x40) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) 16:06:24 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x7, 0xa1, 0x3f, 0x3, 0xa04}) r4 = dup2(r3, r2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x9, 0xcd, 0x2, 0x8, 0x6, 0x8, 0x0, 0x5b, r6}, &(0x7f0000000040)=0x20) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000000c0)=0x1, 0x1) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc0c0583b, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f0000000140)={0x4, 0x80, [{0xfffffff8, 0x0, 0x3}, {0x5551, 0x0, 0x6}, {0x5, 0x0, 0x2}, {0x40000000}]}) 16:06:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf55d, 0x0) 16:06:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0xff00}) 16:06:24 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) [ 1389.169991][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:24 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x201, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4605, 0x5, 0x1000}) dup2(r1, r0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000001}, 0x4400) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044000}, 0x7606ca3882e46937) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc0c0583b, &(0x7f0000000100)) 16:06:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1389.309716][ T2520] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1389.490526][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.549525][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1389.750006][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1389.920057][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1389.932589][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.951592][ T2520] usb 3-1: Product: syz [ 1389.960958][ T2520] usb 3-1: Manufacturer: syz [ 1389.971132][ T2520] usb 3-1: SerialNumber: syz [ 1389.986136][ T2520] usb 3-1: config 0 descriptor?? [ 1390.272130][ T2520] usb 3-1: USB disconnect, device number 38 [ 1390.530519][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.029433][ T6648] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1391.169582][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.279426][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1391.479530][ T6648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1391.569542][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.649446][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1391.658574][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.667312][ T6648] usb 3-1: Product: syz [ 1391.671904][ T6648] usb 3-1: Manufacturer: syz [ 1391.676496][ T6648] usb 3-1: SerialNumber: syz [ 1391.683416][ T6648] usb 3-1: config 0 descriptor?? 16:06:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf5ce, 0x0) 16:06:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:06:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socket$unix(0x1, 0x2, 0x0) 16:06:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x804, 0x1690c0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8101) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x100, 0x8, 0x100, 0x1, 0x3}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048810) 16:06:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x6, &(0x7f0000000440)="169e917879c00d6d5221210d85ed220b252f2b358968f84ef74fb88ddc89d04c88d0a0337a061c83ff772bc93d04336f6895fe7558ece1ff1e0ef1845fc494ec04d011db5c8e52941711df724bcc581834c3aa33df10d956c246effd3d60fb53a296b044f9ddaca3eb60ad36cc23d1b972adc69bc7322184ead853468db065819ba64927b4eaf542d81d39ba44b196e3dcf8f6cec2177fbb114e20f2e0fc902f006b9529bd6d623b7b48bd2fcc7bb36fa6dea3d0ced2f2ef542d892068ed57b4541849b9ba4b1ef4fcb3e205342bc7d60e9957b6c7ca0be2c1938b021995005990") ptrace$cont(0x1f, 0x0, 0x100, 0x0) r4 = gettid() ptrace$setopts(0x4200, r4, 0x8000000011, 0x43) tkill(r4, 0x2) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = clone3(&(0x7f00000003c0)={0x80014000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x7}, &(0x7f0000000100)=""/161, 0xa1, &(0x7f0000000240)=""/125, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) tkill(r5, 0x13) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) [ 1391.851688][ T6648] usb 3-1: USB disconnect, device number 39 16:06:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x400454ca, 0x0) 16:06:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x2, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xcb, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x2841) 16:06:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x2}) 16:06:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) [ 1392.078208][T31272] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 16:06:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x40049409, 0x0) 16:06:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x3}) 16:06:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1392.146874][T31272] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 16:06:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x40086602, 0x0) [ 1392.379509][ T2520] usb 3-1: new high-speed USB device number 40 using dummy_hcd 16:06:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="e61015bc8e6cd2cfa66f7f859e1e9d7434ffa96ac7eaf9a0829ad7ba6a69710957dedafa464245af75bd8152e0bb94c77df65f94136f830e9283a126ac66fb021886295d3a75c7f884421a5f333db32e99eb98ea56c514cabd1ecfdfc187c8834ec7d885fc9bfe330a6c224798fe4904816314bfcc6ef64ee4e7877b109be8f88e18dd38e94463d2e40aa00f6fe8404f48a8f118963d4528eb0850bb75b42d17e0f9aa842188040251e27c6f8d7e8705c4f9", 0xb2}, {&(0x7f0000000100)="01a034223c8b822a3e6a600871a1f3998d25b070d504e8ff35be803f98f4fc61c6e4550c71a3e74b0d1249faf51203115b64f9d7777247ff86ed805bd1ebb65cc8ed39a65fe0276056a1e627338d9d9e8704371d0413388df2ab6dc177900bfceda9e611b5ae", 0x66}, {&(0x7f0000000200)="7b93acbe83088d0a17895ad28878226f50a41bc32c68cd755388057db717c42866b96318d3284ed8215f6caa62d2725f36e4374bd5c4d5ec103ee26cbc8cc0a6503a2205217ec5e133", 0x49}, {&(0x7f0000000280)="441e3b4eb119e2cf78f4816269ba6382541a6ca162da9dbddca9ae167ccee25d910f2b21a71909a79b8320d2b23293d04ae9cf289e38fddab34bd947b93ccf54923ea45069e3eaa0bf912fc68f5cec56881a10e3ad0996eb08a549e4e06b", 0x5e}, {&(0x7f0000000300)="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", 0x1000}], 0x5, &(0x7f0000001380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x130, 0x29, 0x37, {0x87, 0x22, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x23}}, @generic={0xfd, 0x8a, "6d6df534f58617181d2a64812d706190817bf2cecfed0a9b6de1ece1c8dce36bc70e4f187dc2ef8cdcf657654f9519ae3f4219d3b9c4ef120e5916622b6537773f5ffc1efd8634da8ea55f19cd114554688a2fcc70df97c4d71852f4ca5be34a011f89ce7de4e96cc6d17fdfbcbaccc27e7d43d9c0b7c4c1766f169176e5d5135bdeda10af204dcedd79"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x30, {0x0, 0xa, 0x80, 0xa4, [0x8, 0x1, 0x2, 0x4, 0x6]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0xfff, [0xfffffffffffff92e]}}, @ra={0x5, 0x2, 0xd5}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x69f6e244}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, [], [@enc_lim={0x4, 0x1, 0x4}]}}}], 0x188}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x200, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3b}}, 0xad86}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001540)="e922709ec188b17a67bcf30c01c9aff23a1ec33ce9f446e6c46289d9225cfeb758af92098a0d16d8570f25375e30d64779742b0cde2fc4be2bf6114d004f3e5fe98d27989f9550829bf11f731f8572693e3ffd7ae1526dbc23f27e2756d4f7ab7130a5ad4fef621da9a218c422cfa69c63f454afc7203f570a148afcd43f57b0959b4624f8833f2be13742e2ed0b0f0713e7b3d0a493f4046f95b3433e4f4ccbec60888bfa36984d1e0f", 0xaa}, {&(0x7f0000001600)="49afc7c6b0b6c413c9d9f6b0fb311c117f1592a16394701b8dd9b9204c733346241ca2bbc06753545830d162d0b3ea8521150670d1f88e00d051faabd764", 0x3e}, {&(0x7f0000001640)="c87bfd764f24af176c3ebfead3105e134dfe57411ea1fa32cbee5d870612e833f51d9029f6ebd79081aceb73e14fcc09e290960aa7f11b0ba812ded53cf9ce3daa2f577de29140da3ae683170221941cbb44b56ea92093f548e1e990773fbd62e0c0dbdb5bf785a931bd6387d3e84f02f03a788d587a3cd0de49b37a58cdbd708337ee8b035e723f017077bf04432a5a46e5fb60135235fcfbcefc692d57", 0x9e}, {&(0x7f0000001700)="c03bc568b7038f481743332c0c3ed15510279db531b48dffbad6ef7570fd0b12ca49303a4942bef80ebc34a1e39c145d0ba5a1c066e56197b770b7246e4e7ff1ff4c9b079a46d4f0ad747620f964beb9b50612e36667fc57ef191b9276ece79a51700e9839b0ebfa84b7fb49aeb3dbba6880f04c193ae88f340a9976cf5b458f29c606d570a2880fb36a268a530daeb7f69269", 0x93}, {&(0x7f00000017c0)="ab1a0d2a59aa871cb3f5b4e5a4ce878b869022418e5d35acd7b85239e91b96f60d2e43a4161a9d63d1c74154f415f4eecc2d49bb04303c19180dc9e24b7a1d803723987a5694d4b1fff42b583cc9416f83b7a3ac3c547a2abc27dbe680948e6c881759809cf6637401a1c05a276df181fabb26c40eb62ea74c7a7d4d635d074c5412e30862a64b92b13a935024179683214a23ac5416cc45f5b783faeede8a38a5dca1b0d4f9c3b243b1c100fa50888625b8a1ccfab3f8ada630879a93c0ff1e85ffd1e5b6590e0474c6cc9cbae387f95b01c785cd5fd1c638b387b2f899926f4838199424b387f863a2811836", 0xed}, {&(0x7f00000018c0)="14df40303bb5884e71d7318c5a77f1fd7c4230ffde59d0772a5172b7fabdb6c81e7c7dddde442fa832ba6685de32ce58dc813bf9a6e596d37453b5c8880dcbad624cee2e772779b0b1cf1e8372950f26babb8ad0c21619700e359df2d93651ad02e40e0c5ba560de94908b35002de54d18969578e83523b8d4eb7f59c812d568a76f9b7082be8a7f3046572f044800e7c9dca4b63c4d7491870c5559a95ae3b07e12756bdb4bf64d83ebb321a89f5367626bfd9e0522d43cc82ca50efd4d50c93a165360b518241df928ac21134c868481f3b40bfa52c11241666b4d034ac48f679c43", 0xe3}, {&(0x7f00000019c0)="97df5a85ed6952ec9815f915d7b6fa3e5dddd803fcb7ec42dc516757f54d35084f9c566e4823d99c9bc07acc4ff754a90408407024cc94f5bdc5ee29b6a61fd7be8f30df58859a6024b21f0d96987054301742842a751e17e3b952613837435598718ddcd3a615a248b43d975688a54782be40da952559e33898366d25b05b1524c82705c806544824fdc80f0e68b6e2c214d448752f0487b96cde3ad824d61ee2fa70262568745f08e397eb13b28b1f225c46729a4b44f837cd141398a8e779668c9e", 0xc3}, {&(0x7f0000001ac0)="d3c6db1ad4168cccffb0fcf542ae44efeaea0ed61f051739f27f4c9063a41325a38bb9d8e19396f057188d25bfb983d48f05ce803fa8b8c3c229f90d8cbeb4ceab0a9718a14aa5a6ab5c55491aeed61280e86fba5f1cc22bcdc68353945bfdeb96767b822d0808c946f9ba924d176f43736123c0791c984aab4d57ab39c80bb78d941443c5bf0f6d002edb3356fd7c1369215a7fb3e69264f8411a69cac936230e", 0xa1}, {&(0x7f0000001b80)="f26bf55deaca4dfb140ff40a5c75855c937ec7923e2e96f3967167f09c4ae1b4da676d03092c8d4e199abcc2", 0x2c}, {&(0x7f0000001bc0)="427a45ececace58bf5ce3ace5362d3df", 0x10}], 0xa, &(0x7f0000001cc0)=[@hopopts={{0x38, 0x29, 0x36, {0x2b, 0x3, [], [@hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}, @ra={0x5, 0x2, 0x8001}, @pad1]}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001d00)}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001d40)="43c8d82574ddfee323e772608e9086cde4441cd038266cb47e006f1537207ce3fddc3879f461477c0419afe197be6b17e8881c8fec975ce45ff510", 0x3b}, {&(0x7f0000001d80)="19e2175d288ebb152a17b681f1a2aad934cd0f7eb1d450d2255cbac74da1024b7f396afb38e640b5988169bde26a17b3bbfa39838ffae6a5b42e28939c6c5f9812a4150e0151237bdf08c42031970e35b84366ceff013654948b9d8da2551ef26cc7812265eb01ee83e7b92b653a67a36a5d32cea7f8360028e3761b3c4237d663", 0x81}, {&(0x7f0000001e40)="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", 0xfc}, {&(0x7f0000001f40)="a62fcbb9af1cc12d226993ee709f6f71cb90fa9dd58eedff0ebbb6fb12bbaa8588787e687217e375d69e5c47c897af1cbe9cf1717f9eec843c42229ef38f282d287ad51b87c9ca184ced694f598216b2279ad1cdc8bdccb2586cfd33e3ab374d06a4223f9c81d9faf8bf552a439da84f5fbcaa6b2a3096c3e2c011a85ece374ec2b249ac8b1266e6079409a46a4326124382a044e69e8e4f4c4858ed879416d1", 0xa0}], 0x4, &(0x7f0000002040)=[@hopopts_2292={{0xf8, 0x29, 0x36, {0x1, 0x1b, [], [@generic={0x5, 0xda, "caa1e71824553d04c37ebaad49ed6f97877b53069e4d4822a26e2efcee55c7ea5874f6d70aac620222761794cf6e249b4fd4ae95db7c069f13286015f6330d07bc0741e1f22b1e040b567228ecb965ebfdd99606b16049936a3bd489aff45d30a015706dde4454c98ec92c0014b47d731db3767ddd530e30a6c9ecb3552279858aafd2fdfdb470182cbd4eb48f19d282aa9edff5665718e976aac60850c1f6d420b1d5436b40e6548f2440b313c0129881aba0ab5acc598d2028bb6156cb8e70ef62538fad5f363cd6bc23a33b4c94b9a54add6351820e98849f"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x140}}, {{&(0x7f0000002180)={0xa, 0x4e21, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c}, 0x1c, &(0x7f0000002440)=[{&(0x7f00000021c0)="28698b8a23581ab65588af06b7495dfda95c56d327024e955fabd8e3079f61cddc81f3e04c5e025082483db575a1cc97f3d17ae6cfea9d5359499ff964da4dbf32388eab14e78eb32d76c86876191f88d9659e3dbc61bc4bc7ecddbcfbdf3524202004fa1241c87dbde58e1b3bbedbcf2f106009b583c78675960c88783c028cc48bb786f21042ab0a2ff446454254b41ec43ed5709d1e42306c6318ced58117563c0a445f81e2f16726a0d960f20598624fe77d94df22858ca2931e802f", 0xbe}, {&(0x7f0000002280)="15441b3a760cdb5407ee57d46a732336d5981e84ba53570b31aa17c97b50d5bf51ba23932004aec3b7749c2e5e79296e1222b2b19c69def510d42938b57147453abc64f5159f5fdd530697d056a7b1b7e7bfb5cdc000691612331b31e8df21e06a6dff32f5399d5811f4856e1a0548d4718b984a9085159404e9829b13301ce33b29676e63006faf6ae180a2d729ec1548f90cc9ce544b8df718af809b6e5c8d9ce459ea064f2ce34e6730c39a2c7d46c28e32f700979068155a84f2456b3ed15287779d85f1eb22c56aba1d54b8092cd7b3179ce8434fb3c637", 0xda}, {&(0x7f0000002380)="6e73b92a1ab0fe5d56842d2e45f91e7f35cbabc177decd0e764022073b11473e365962f118137da994a0f8aa560a9b5e83a78980df30cf90", 0x38}, {&(0x7f00000023c0)="dfb6c154d21ee43b6392e7d214d425dab5d0890c30d268bf36fb802ce4e1fb83e46849df999e607dfd366266c45d7b7776bc75d59281cbd5656278c54be12ed0ccb559277eb6dded8ea4e258090d9522bb5c107f826bedb9650afedbb38f753cd9", 0x61}], 0x4, &(0x7f0000002480)=[@rthdrdstopts={{0x170, 0x29, 0x37, {0x62, 0x2a, [], [@ra={0x5, 0x2, 0x3}, @generic={0x0, 0xfe, "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"}, @pad1, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x0, [0x1, 0xffffffffffff2225, 0x0, 0x2]}}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x7f}]}}}], 0x170}}], 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) 16:06:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x4}) 16:06:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x40087602, 0x0) [ 1392.619407][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1392.619458][T32441] net_ratelimit: 1 callbacks suppressed [ 1392.619464][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x5}) 16:06:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:27 executing program 5: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x488c3) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000000c0)) [ 1392.819573][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1392.999911][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1393.008962][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.028176][ T2520] usb 3-1: Product: syz [ 1393.034806][ T2520] usb 3-1: Manufacturer: syz [ 1393.043201][ T2520] usb 3-1: SerialNumber: syz [ 1393.051997][ T2520] usb 3-1: config 0 descriptor?? [ 1393.322157][ T2520] usb 3-1: USB disconnect, device number 40 [ 1393.660194][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.069293][ T6648] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1394.339251][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1394.559364][ T6648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1394.689413][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.729302][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1394.738317][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.750225][ T6648] usb 3-1: Product: syz [ 1394.754375][ T6648] usb 3-1: Manufacturer: syz [ 1394.758952][ T6648] usb 3-1: SerialNumber: syz [ 1394.767589][ T6648] usb 3-1: config 0 descriptor?? 16:06:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x6}) 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x40186366, 0x0) 16:06:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x600443) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, r2}) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r4, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001380), &(0x7f0000001400)=0x80) dup2(r6, r5) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) getsockopt$sock_int(r7, 0x1, 0x4, 0x0, &(0x7f0000000240)) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r9, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000c880) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x111c, 0x3, 0x4, 0x5, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x1}, [@typed={0x8, 0x59, 0x0, 0x0, @uid=r4}, @generic="58c9a2afe6484afd7fc778a6c3714c713fc677ded76ae45a860616a424020707a230424f242638bbfcf7d2a8ac1f7c167734c6f2f13ce0a085d762852c2f6d9d3fbd4fc52705776669677c9693204cb74331df4784f92f26391520c3e3dfb57dafd62f51c7fe7f94df76bd6d910ddc5e9e3707a84db68c742f66b0d7e284cb8b8391b60a9f4369f01f809b5436817bc29380b7c1a10fc36ce8784377d63afdacd86839417f9a839b3321b14265dd42cd71dfbd7ef73a846508ba4ca56c6b362d392157a4b0cfb33f40f0f57dd6ec33e1dbbaf80c1341071faba5778ebabe026da47bc2786bd793805d0e5ee6e2441fb72306", @typed={0x1004, 0x79, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r6}]}, 0x111c}, 0x1, 0x0, 0x0, 0x40}, 0x1080) [ 1395.069741][ T6648] usb 3-1: USB disconnect, device number 41 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x4020940d, 0x0) 16:06:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x2841) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a9, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x0, 0x8, {0x4, 0x0, 0x101, 0x4}}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4200, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) tkill(r3, 0x2f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x7}) 16:06:30 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) [ 1395.249372][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x4020ae46, 0x0) 16:06:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x8}) [ 1395.589202][ T6648] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1395.739304][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.839164][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1396.079889][ T6648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1396.249214][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1396.258375][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.266790][ T6648] usb 3-1: Product: syz [ 1396.271256][ T6648] usb 3-1: Manufacturer: syz [ 1396.275874][ T6648] usb 3-1: SerialNumber: syz [ 1396.284992][ T6648] usb 3-1: config 0 descriptor?? [ 1396.571685][ T6648] usb 3-1: USB disconnect, device number 42 [ 1396.769400][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0xb, 0x803, 0x9) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x128, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x8100) 16:06:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x4090ae82, 0x0) 16:06:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x300}) 16:06:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000040)={0x400, 0x7, 0x4, 0x10, 0xffffffff, {}, {0x4, 0x8, 0x80, 0x9, 0x6e, 0x3f, "9f6c37b0"}, 0x4, 0x1, @userptr=0x7, 0x1, 0x0, r4}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x9, 0x5, 0xfffffff7, 0x5, 0x4, "afae4a0f7f1fc0cdad121934261f2128c2e585", 0x3, 0xef}) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd9390102030109022200010007903f09040000011dea4e0009d6f94ac5a741109669c34c150371cd"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80086301, 0x0) 16:06:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCCBRK(r2, 0x5428) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000000c0)) 16:06:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x480}) 16:06:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x22c1, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[0x4, 0x14, 0x2bc, 0x0, 0x5, 0x9]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000140)={0x1d, 0x0, 0x9}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x7fff, {{0xa, 0x4e20, 0x4458, @private0, 0xfffffff7}}, {{0xa, 0x4e21, 0xfffff800, @private2={0xfc, 0x2, [], 0x1}, 0x401}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf252000000008000100030000000c00990001000000ffffffff080001000100000008000100020000000800010000000000080001000200000008000100010000000800030078e9962796b6f9853740af67cd9bafc22be36ecfada2dfcc08974ade65ba64667e5a2ce6a67262218529b4f908b5c03b0744a09d85db1a630ffd5c5ee460353dd15edc63df69da7189ceaa79a4519c5daea2114913b23b2a20bb60cbfd2f1b40716f62754975685f20ca9d0daf5189658c53", @ANYRES32=0x0, @ANYBLOB="03000000", @ANYRES32=0x0, @ANYBLOB="1e0f2c7e30204e7e96e78a431937c6772d1f1db6704c62c62ba2c8b3ccee8752a70881bdfd5d2eb0c12add689d6ef119488304b3d6e21688128134176f7eb519784bd4b3f8109031e68337279e504e52d422bc9d6768f336d0333f4e9f898125201935eb055c80fc323c823971e3b2a8405a517295eb5af163ae72a8f5a3d7271e7896200d"], 0x60}, 0x1, 0x0, 0x0, 0xc084}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000180)={0x2, 0x3, 0x2, "0426b5a2e24b5d24a3515e5f0c1780c8c8361e01e50b61895d9c13886467a607", 0x47504a4d}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000000340)={0x4, 0x1, 0x6d9, 0x0, 0xc}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f00000000c0)={0xfd, 0x2}) 16:06:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80086601, 0x0) 16:06:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x500}) 16:06:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$capi20_data(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="100040cf82803a0001000000e81f90b22115b6941a17d4d642560bdd0baede3bd619231a4ef439b92fd7c575bc32532ddcef664bfa80ae05ebc249c570611787b3b322a4c09afc56618e17fe537fe8f466e5c2e9f67218b5cc5e6ad92a0421667821e0530c7156f5e244fcb44bdd79040820f35292b5e7b6162747ac346d968a8ed50f9147af22e6422cafce0a7508d94fcef30ed8877b5978556f8c63d49e12e085cc345eb2af3083cafac836a11df3ac435e35858d738a1193fc4d721d4f14989e5a6d9b06bfd009dc60315fd132cf8533c5eb934a309c4cdc2055a78950d5d449f1ff4f4cb400"/241], 0xf1) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc0c0583b, &(0x7f0000000100)) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x10009e) tkill(r5, 0x2) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) migrate_pages(r5, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x8001) ptrace$cont(0x7, r4, 0x0, 0x0) ioprio_get$pid(0x1, r4) ioctl$NBD_DISCONNECT(r2, 0xab08) 16:06:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80087601, 0x0) 16:06:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r3, 0x1000, "b4b79dae5d02164b2af6c51e07583ae60de3852a6470f8da47e7747d0c1e429d9d02d8d3bc77a82ec3b2da342e616a2329a81640b35a657e71c5c251d6916fc7b403b9cee7d6b5847ee1a844b39543bec6acd225ec870b74fed344c61a2ccd2986075776bf50f49015539878ca2e51dcd19b2eb3fca7cfb56cdbbbd55c41429b17213fc387af432cb79bd8e25e63847bf802c4e68299c337ebb9352a70fc09753b6d616c71644c11516950cc2b4d51816539011c194ac8acc88d12a6f1d9981c24c32aeb64881cf1991a1624d55ede174c6e14ee5336b5f2c459ecbdf9020fcd472f020d19629cbf46c097e9f509f969ef5b466bba511783950252f2a6a2eae7e27ffd9d07f6a8f07742cee5110876af7c8938839376df6623ef66cfc4fc5eb1ff75da7236473446d16e347e10a0c6e3b42676db1a76cd0142665be395150c4aef811333e183ee2efc6ec4c43bc33f4cb54aa8bf6557d98684a1b314a577eb06554d0bab1b57ca62ff9e90af4617be1bee03159073e42f10a6b56718a958badaf79bf64a300f081159d81525f13e05e4694c79730378766b34a0446b27424234f128bc1ff2fd92688fa19f3b7f34c37e5422f45f81052bef36557d716f480bfba4290c17fd81050b684a5ce09c2d7788af87c08ebe26d34298179f9eb0cd71643f52d431e7740e88d5fcbfdd68d9803c738f4894f8353c41a0a4c0b8ecf5067e7438de692d8066bf18685896c10930c11f293310fed6b93ec14afff472dd17738e8fc8bc1186f08161b4c2feec256c6f0345525c3d623fd3ab2483b6ebaecb6d3bc012600b458c634bc614371b215debde7e8d724b708adec66e0e5eb45a09f30352f805c27ba3037d49c0ba6ce05df9eada776f1c14311149741c9dcd89b45b1dc6d6d2071c12f3c280ea967a147be4820ddbaaa5968e7ad71b2aebb76106bae7231b604ab9fcf44ddde5f7006b0009e0c34ea9a6fe72903bd367b9684c5e4a86ab98b3af75954142cfce489fc124dd97d2dd08becd3772e6231fb822dec98eaaef4a473e02528bdd70fafe0235496a66033856caabacfa410b272fd9714ebcaad4fbb9f845478dabf070eb053e766cb77554f8b3f52d2e4c2a0f49705a255585491598981ac85359d76ed55250f463e2a27e1bf2c678b5da4d71bc00fcf2b39f05536bbeda228693420d78bfe517bac9822ccdb223c822669eb9bbda05083f6bdc1b9568f360012095531f662a09867d3cd58c7ca1e2c6f3e41985b7cb915c6ec44cadb6505b03807ef22d3e936c698193a1f048d41d55591e6480ab875e6b659541bd2e93c48be89cdf66aff6adbb058fe280b8233f809601f18b6eeb715556eb6f6a017161722fcc83add126684c4d9c3b0c97df853bf7aae877a05a9b1b798e1d0e18c6de904bfc4911f627c233db23634ebfb56e872b22dc214045693a9223222b545c133b9be047a6639df0a3df9e347cbe24357de32962df3411391a96c48d5179b9019579a80bab77e7e2d5dc46d8d4be6b5c616bf9761fa3c3b433b6b7d46590014e4eb2992bda9581396543e79a4ca1fa1bc22a54fafa6ec6638cf2a7eb594d19e2e18abe357bc50ac727699fec196c2232224c2089c5fd7e9e971545f8e6126d22437bb5e205aa233b94a2c1218a0ff62306280334dedb0901a82994f4ad35d537691c6e567fa108723de9f3078c2db8718af9f7fb94c0b9eab10dfd95a5fb5b27bdca57bb5e6bcbe45b30ce5b8b7e3383abe64c69503785818512246e4229aad247bce140628c1c3f1d295438c2a4a641b6ac75e80073fde2aa56f784ad07bcaabc64111adc8c414e4afde1cdc929c7ed4f0f039aaff3c1e7764e7851e3f15466784cb17101a058efd0ed74cc4b1fb02be8b999602d8a40768dc5268d16d711f63ad265f77854ec2d1b37ee0d9f103cfb8f5ad9c8044ce43de33a3ea19391e888c7b39a400038e4331b0147a09f4f7b482f0b9908a5d5ea5f4c717e37843334768bf9baf6db16f1e2813a9461ebad8b22fd91ed71e3019dd6da9af52de064327cb748367cf4c3f3c3ca2b5661a7d0fef79e08d5293084aa48de19058870808eb9921f4c1661bfc93f68ede38a1246de221aa1e3dc7329fc2853207c7b12dcd9360329d97aa7e4a3ee0319b414b61747ff2c662161ece9ea88a4b36b116756693129528cdb97f720b8e73a39773dd1473c41bd569c88c8fe97a4366d4bcf3a8b3a1d1c92b16bd65b0d35128a84e9c377905d223429125b3c74685f0b82e412fd4076e402aa57554d7452b028754ccb4599225cae8738bdbe26c03f591a62fc24789770a1802ca13c871c826ebb5fb8c6656bf0157a741271ffcadf8e9819595110c1d716457f8db8c03b924953f6f08f95e1846fda999ecb2598380ff9f1ecfbdad497bcc806653b0219c23441ceda7ff4a60b4330eabb267fb67216b0afc0b3e0815c3d50ee3a4bd2b27d061ef492b3b005b3a81213e05e6155aee6ca9c7f68219dcf83e887966490ca1542068b08ffdf5f075db755b1e54b18970e624a8c4fb01b9abca003f55c287298baf83f1fc8f42b204d209b51e2d2c6e5d0de7399f804069879b40754ac5ac77291f8c902bd36216a85e3e8f157e1205980ccae9395bf4d3f6397b52f9a599dbd98ce278a53b4edeccd021d5437f8ca4935d67c097501fe33768a13790c0824a20d224429ea73889a0b5174ed89b3d594d452adb41e3eb21d61161bcc0142ed3eabdab7ca8539c95a3843d0c00445866220602a08e6ca67477ce82f85cce75c8746ae0a2ee88b34ae60c114eaa21e3d5863c8d2b76347a8414b4368cfee4181fd12b6ff2a08e2eb1b64e326d99a984431b58a5129083fa9c0a9832905c2df9ce90fd17727a166b38a4167ea246d3f2bbf42226abd85b7289584527b4974b0766ef8b5334983edb8f1c4ec24ae3d3a4277212a78cdd95b137737afdf65904ac0a96fe22451bb13a5e975ecdd047d007a43eea4d4a339c15ffae42dc78be05bfad56e37e3f592c2256ea14f81a0b73f0c09cfff2590bc7d0679c765fa3e0d1f3204c172a7c345b6be54d0ff521111b03e91eddc5dcf64088f1b4b7627cffbbec55f19bd1524447c61e646737257406aa1f8c18fecb50bfc1dcc0590981e3556f6aed76d2b6fa1092615ceb4a6edac8d27b6a1a8ab2ea67ffbd62f8c635172bfa1ab14c380991dce37bdbcbf55daceb82110962c10503bc9ba0161e470de9ad62a8d84ac7ae1beeac4199b4322f42b5a17abe301be720176fd705248cc252786015f0011fdeab22cc26bc56e0da1c82b238d1ea876e6290549f642b2277080f0b8489615bd2c7ddf0fbc8a4b8f3dc7e6f8a6740b618d7358e329d2fc8242944715bd4a7aadd48398c9bcb23adeadd7f8f30837b9c333a5ae5ce10ea444ddc92ad7c7010e1eed85e79e539963b6dc10d30503e2340ca0c74c4f3808d854ff6cd823d08ab7de1b05857215fe33687fb01c18462cc751abe492bbc47efca30db1de2839c6e81a4069f8e8ebce22e5d016ffa02b845476a1719f3d9da0e22eb2f6d12f35d9e6d295a22f1a0727a37aed04475475fdc2779ed8cfeb99d4d78b571dbbf7ccea4ef695890524f34532a5752320394beeaeb461ab26314002cac9efdc88e15e5aed2fa6fe36255d3167336f4464df6427d3c960315a6e0daf2e3dfbe3492936441ed27ec91520aeda688cc208c4216ed3e73fc56b27a0b940b350511c63d00878eb3303f427e32490bd21f081c00758dfb538328bab2d4d0e2d83535e4d67ecbe6b0247205e9f20ce335382180ba2f8f27adcf849995fd50378c94727d17d75e50786c7b36d36c424e6dcd1ffe61c12755f5a18dc647f5743c6bf48daabf2867e10bce46d09005c14ff9d5a4cbee7f739eb79d7bd7071b050c961f2f04804619e2c17bc5830f30e9df2f33f6335631d1137b6369d314a667d4e7276accaa76e3313e6bc1a39b6320c472fccc2bfb4b85cd7040191a7d12983de50dacc19ce11b81a1e566bd23b00f5a8b8757c033e8306051cd626fa0c54e995b8a52fe510f327a86de62e69182acd05080cb40559c063546e0d48841682934a4626983352a51a4ec8fdb02f413bfc63a77bac340eb409365e357af197366c5de24977821f086adca0ea5e4e17f3bb1ccf4c7f82db859434522c4c6955e2d3f6a4d372d153380eafa659d85855e92092b6902d1f77f1814795fa20969609c1a728711915a4678c2233ddb0a521319222749640ceb42a3f41436293caeb0f0159dd66852486e80658d9febf5cc40a1306a572c6f54be696abccde08a768fce6f2f25f188706edd4f052bbbb1047489ae5ce2392c410d43684becb4ed6fe352eb054e1aaeaf97aa077186ef97a92a04c68ae66da6c4553652ebb8ff6a870dce2235bae47ac381869d99bbe06410133f86482bded845a0eb59f4645b61a02ed02585d25c7abd1440e59e9f8136c775cb438c06a46d17e4054cfaf7424e1704306c55384038e9269a139dc5c6b9f4fc89d9fcd27ae56e747dc333cd145cc5bc721f917b395a8b81fa366b31b416c182f4a5fb8ac98933f27204d7511807811969d71e4d3f3fe27efddb44b892103bb27c6e297aa31206e831cc454bf89def2305f1575d2e3a7ba7395428863c132ebba4254dbf671271d7862e25022971e31c783dd4dcc43446a31ee1c72804b3f6c8ce2c2c3f24634997b4c2f082e203b688a0f592ea9cf854b8ee4f3692cd44f331234cc0aa19f92e232661a4ed6de6b2ae369ad5b9eaedecee4807cea14c0eab70dcfd663bee3aac94a4f201038ef50a77f826bda2e8794f28e219c5c617f6d4c0f3532251fe47c632e1b135b7ba0e496fa3a04138c8415e2375b72251b4660e165ebbe3bd0874211996fbd10035777f4385e5645fc0cbe4a0fef491a6a3b5ef728cc2a05ccb8ef691c731274fca058efab7a908651e0eb395975e84b2541c1b40efa45ed900802b231253be9c57ab8392785a92c0e2c5129d85fbcafb30da1d1ae4c2e61f555bf2d4ea7e76fd5cd1615beb0e6284ec8c5602c28093b287bed08525a3a6d7becbb36eb7883169216e2482d340b34dd08eb9b269d800cb9d4426dfaad83ef6f7784af8bd02855fcf6bf5e356b123290c5267be88a40190d32a2753ee90f202194fac5648f4d5bf3bc28e69dffc1367b46e9979e3aa1dbcb4937994165508e6df398692813e067ab377da27bbf8a13d00adef604a5338155f53384e263e86aedf9ca69476516021bc4b63cc489476d827cbf5a7b730a7c164458aaec9de013328067cd00ae368ed0853d4cf9812a4fcd778a3477765d0b876917b5a3e43afbcc235f2c8d29245d6f07b105bbd34dc9f11e9b6c546b02985465c981d7c752d0da641499050c9b8ef4806968f3a864e2f79e0eded1b55b03b142e6465f1e6993c1e207ed807a9e1abca18d84a5c43e0d617914ab13a0c30c3896d2090e10cbb565fd766eb8ebf23f9697c772cc102256d31731f744ce598b172fe17aa18a4709a4b8e39fdecbda63b02c646af91b36db6466fe2bb48102cda73229b5c960c3b37db0e065e4cd43d0fc07b1c2a89a93f95ef23e274e1b7c0c3cfa6b90d748ca2bb362ec105d1ef4095fc02016ed90be8719ccc7aee9c44f2bc2057bc40b9aed05502c4609aa9b83436c66ebd72d57770f9bc773f5ef9c0a980e3dd24c812ca64a344adbb8508ad2d9ab6cff12efa8f7c77fe1059687ff4f40a3d0e917f1790f1d50343035db127b05efcb5a02df2d0c4edc99af23894e2606c9537792351dae309be7072a"}, &(0x7f0000000180)=0x1008) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c891}, 0x20) [ 1397.559160][ T2505] usb 3-1: new high-speed USB device number 43 using dummy_hcd 16:06:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1397.811810][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.819115][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1398.019576][ T2505] usb 3-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 1398.044403][ T2505] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1398.254373][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1398.274289][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.295547][ T2505] usb 3-1: Product: syz [ 1398.314375][ T2505] usb 3-1: Manufacturer: syz [ 1398.333928][ T2505] usb 3-1: SerialNumber: syz [ 1398.340625][ T2505] usb 3-1: config 0 descriptor?? [ 1398.360511][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.621089][ T2505] usb 3-1: USB disconnect, device number 43 [ 1398.849217][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.359163][ T6648] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1399.598958][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1399.809095][ T6648] usb 3-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 1399.819470][ T6648] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1399.889140][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.989024][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1399.998240][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.006557][ T6648] usb 3-1: Product: syz [ 1400.010847][ T6648] usb 3-1: Manufacturer: syz [ 1400.015471][ T6648] usb 3-1: SerialNumber: syz [ 1400.025743][ T6648] usb 3-1: config 0 descriptor?? 16:06:35 executing program 4: r0 = inotify_init() mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x58f286b3a4ec6279, 0x10, r0, 0x68c83000) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x80000080) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1ff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0xae8d624e543880b7) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc0c0583b, &(0x7f0000000100)) 16:06:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x53b}) 16:06:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x9000aea4, 0x0) 16:06:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, 0x0, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffc, 0x400, 0x20, 0x7, 0x0}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0x9, 0x80, 0x8, r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = dup3(r4, r3, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x8, 0x12, 0x1f, 0x15, "720ad1b3b431e3ac89686cd4bc4889299ca0d25f21344600bce8311a548d359337bfad752df349a32f146c81ca975a3098d0311f7c1e5f1f5944f78cc94c3d9e", "1c8c96620820c43787aad27bf84eedae4d21040a8645c70520f48921b6eb7dc6", [0xc00000, 0x904100000000000]}) 16:06:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000780)={0x1, 0x1, [0x2, 0x2, 0x5, 0xb1, 0x6], 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1400.171179][ T6648] usb 3-1: USB disconnect, device number 44 16:06:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xc0045878, 0x0) 16:06:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x2}) r3 = dup2(r0, r0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000000)={0x4, 0xca, 0x8, 0x0, 0x1b, "204ecd24071f7a68a87ac74cd4d79e635c49fe"}) 16:06:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x600}) 16:06:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xc0045878, 0x0) 16:06:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x700}) 16:06:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xc0189436, 0x0) 16:06:35 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="98903c168f8acddc379939757a79e8b890e2dfbfd95ce10e0cc700d7e0d2", @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc800) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r6 = dup2(r5, r4) r7 = dup3(r5, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r9, r8) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000980)='/dev/bsg\x00', 0x305201, 0x0) io_submit(0x0, 0x6, &(0x7f0000000a00)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="eba0bffa1f71e8cff9ca56005412f6b72603dcfc7481e44dc4030aed3530910e4eb29f684b8e8fe019447c14da7459b6fbb14cb09976efe2f4988e00315770a67f97f0b99282a4dab5648b676416e1eb1ce2da47f538a91e695fe6c60e4e67b979c7306a59f7243cf27bf374cd691d2fdffbbb2bcb060a91ffa9a68bd30d95db7ac713c12b7ed0dd8c8241af5cd548d50ea4cf56cf2019442e9d10bb9b19ccdb4ce7017f6d92d2b9c8ca8b307a3c0c99efc61afb7718df05bb7433742522cc8c235c017097b87fbf88", 0xc9, 0x7, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x200, r6, &(0x7f0000000480)="77a8dec22c6d9cbd1163a76995f98d4eb19107f77323e37064a6bc6fcd07dc4a5edfa46947446a62d1b315ce6604981fd41c93fc23500418543841767c9a5b18fc3c8bafb575f49212f9ef464d94e4de1a04c850d05c099666333f03e6610a5df421e2ca3c43db210d0d5dfdfbe5eccdcdc324fef9a284c8830a66d45919e8cbb8f79397306d95c73b871d9f2cbf89aebddcc9a7b66f4597b9902cac39126af9e0544b1183a21cd30fc02e8ce49954d81fd3d0e32e3b25eb5942ab13be1ac815392c34b667a096131370b9d6c25cf1a8884d29873bb55c153cd70a6f7c23be5c", 0xe0, 0x9, 0x0, 0x0, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f00000005c0)="8837dcde681220e109b9080bbd5d90e26a6a31173c24e462ca8a32c180fd73e6205e0f026daf62adf80ab26233e02646", 0x30, 0x4, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000680)="ee963c74920bb7a238bec252c3da9edca6bae921c1f5e12952785df1a9a26cf8bb6a610074c34c7eb7001ab7c6f0b34fced8f5ea25eb7b4e8f75a618fa6ebf17406c03d2f7d5d739859fe880605fd626aa02251179cfb684e71f53934e5633842162bf3d6f28558ffd023816c2c2e5ec5bc1af244fe9065f67bd228131aa805f4bd9511cc1f824d794eb1569d5779fccf5410314f49c8b847d71c27e7a39aa511db18fbbc17046e2ce908ffe4b34423ac25f3d30433ee5dcf3f3a4aff859fa7755e867e053a40289688e2edd619c82c678c63818f1dfbc93be83f61ae96fd810ca0169540217f4", 0xe7, 0x8000000000, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f00000007c0)="8d535dd2610d033d2cd5a6ba7c17c931eb7746eeaf19b72fc4c4e586e48ef7", 0x1f, 0x80000000}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x6860, r9, &(0x7f0000000880)="597926dc39587800ceed93b3138d9c774d0ad6b3114227eae82457a73a30927cf64e85891ef590ada32eca68b18a33be3bca8fe4ea2a8eb451b5d8f4b67442d9a109725cc268ae268d5eb5746a7b07759fbee2b89d9c9f7f3e54e83686e6d8b73694bdff17cac5ee46a4c99a8caf0248bd623595b4f24629ae7a92964cdff0bb3ba05179875fb3eb080f2c238c8b78c4ac5b66a37998a28a4c7496140d756839b2470184129b6ecfaff118257b6ab710b5a5723bbaaf27cfec947590e87c196f32285abc3f1e21d1131c4a2b171b43a566589107af6cfd12d2491e9a9d1a17693c2b671cf324c5d069de7f0b", 0xec, 0x2, 0x0, 0x3, r10}]) socket(0x3, 0x5, 0xffffffe1) ioctl$HIDIOCSFLAG(r7, 0x4004480f, &(0x7f0000000000)=0x2) r11 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r11, 0xc0c0583b, &(0x7f0000000100)) 16:06:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x3b05}) [ 1400.639024][ T6648] usb 3-1: new high-speed USB device number 45 using dummy_hcd 16:06:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x8004}) 16:06:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, 0x0, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xc020660b, 0x0) [ 1400.769105][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.878886][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1400.929062][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.039497][ T6648] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1401.132764][ T6648] usb 3-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 1401.177746][ T6648] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 100, using maximum allowed: 30 [ 1401.233444][ T6648] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1401.409085][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.432543][ T6648] usb 3-1: New USB device found, idVendor=0fcf, idProduct=db10, bcdDevice=39.59 [ 1401.458881][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.467647][ T6648] usb 3-1: Product: syz [ 1401.478859][ T6648] usb 3-1: Manufacturer: syz [ 1401.483462][ T6648] usb 3-1: SerialNumber: syz [ 1401.490259][ T6648] usb 3-1: config 0 descriptor?? [ 1401.814513][ T6648] usb 3-1: USB disconnect, device number 45 [ 1401.968975][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000680)="da", 0x1, r0) keyctl$clear(0x7, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xc0c0583b, 0x0) 16:06:37 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000300)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x4) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000040)=""/206, 0x27, 0xce, 0x8}, 0x20) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc0c0583b, &(0x7f0000000100)) 16:06:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xff00}) 16:06:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, 0x0, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1402.416043][T31541] BPF:[1] FWD [ 1402.433135][T31541] BPF:struct [ 1402.442618][T31543] BPF:[1] FWD [ 1402.453103][T31541] BPF: [ 1402.458230][T31543] BPF:struct 16:06:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x1000000}) [ 1402.470624][T31541] BPF:Invalid name 16:06:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x2) 16:06:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/252) [ 1402.496913][T31543] BPF: [ 1402.508015][T31541] BPF: [ 1402.508015][T31541] [ 1402.515660][T31543] BPF:Invalid name [ 1402.539530][T31543] BPF: [ 1402.539530][T31543] 16:06:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x2000000}) 16:06:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x3) 16:06:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x3000000}) 16:06:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x4) [ 1402.798833][ T6648] usb 3-1: new high-speed USB device number 46 using dummy_hcd 16:06:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x5) 16:06:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x4000000}) [ 1403.009697][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.048839][ T6648] usb 3-1: Using ep0 maxpacket: 8 16:06:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x6) [ 1403.253282][ T6648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1403.440027][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1403.458755][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.469069][ T6648] usb 3-1: Product: syz [ 1403.473237][ T6648] usb 3-1: Manufacturer: syz [ 1403.486242][ T6648] usb 3-1: SerialNumber: syz [ 1403.498179][ T6648] usb 3-1: config 0 descriptor?? [ 1403.794597][ T6648] usb 3-1: USB disconnect, device number 46 [ 1404.049722][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.448945][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.538703][ T6648] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1404.788704][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1404.989468][ T6648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1405.088839][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.159034][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1405.168043][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.177691][ T6648] usb 3-1: Product: syz [ 1405.182353][ T6648] usb 3-1: Manufacturer: syz [ 1405.186940][ T6648] usb 3-1: SerialNumber: syz [ 1405.193710][ T6648] usb 3-1: config 0 descriptor?? 16:06:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x7) 16:06:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x5000000}) 16:06:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0xffff, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000380)=0x2) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x8, 0x9c2, 0x2, 0x0, 0x100, 0x0, 0x1000}) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup2(r6, r5) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000140)={0xa10000, 0x0, 0x5, r5, 0x0, &(0x7f0000000100)={0xa2092a, 0x800, [], @ptr=0xffffffffffff0001}}) 16:06:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200000, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x1, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) r3 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r6, r5) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000001}, 0x4400) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x810) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) pwrite64(r2, &(0x7f0000000400)="7c00453e885e6752ba7e5c7b4a01eebfc68464f3646c59675dd934d04c6946609756d7944f4afe96ba17c1961d8670d7964262a25ff865425457cd8f9192e7a7f4", 0x41, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120108037f036cdbe90f10dbd9390102030109022200010007903f09040000011dea4e0009050600000000000007250100000040"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="64ca5d12fbba32936f", 0x9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) [ 1405.391555][ T6648] usb 3-1: USB disconnect, device number 47 16:06:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x8) 16:06:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x6000000}) 16:06:40 executing program 4: mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x7fffffff, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003e0000/0x4000)=nil, 0x3) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x480, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:06:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x300) 16:06:40 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000180)=0x1, 0x4) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100ca0000000000810000007d87613f"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xff}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6}]}, 0x30}}, 0x840) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000000c0)) 16:06:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x7000000}) 16:06:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)=[0x69, 0x1, 0x3], &(0x7f0000000040)=[0x0, 0x1200000, 0x9, 0x40], &(0x7f0000000080)=[0xcd4], &(0x7f0000000100)=[0x14, 0x9, 0x4, 0x1f, 0xffff, 0x6, 0x800], 0x0, 0x7ff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x8000000}) 16:06:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x500) [ 1405.928686][ T6648] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1406.137232][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.208728][ T6648] usb 3-1: device descriptor read/64, error 18 [ 1406.608792][ T6648] usb 3-1: device descriptor read/64, error 18 [ 1406.888605][ T6648] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1407.169620][ T6648] usb 3-1: device descriptor read/64, error 18 [ 1407.176361][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.488751][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.598630][ T6648] usb 3-1: device descriptor read/64, error 18 [ 1407.718780][ T6648] usb usb3-port1: attempt power cycle [ 1408.209557][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'wg0\x00', {0x2, 0x4e24, @multicast1}}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000000c0)=""/87) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) 16:06:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x3b050000}) 16:06:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x42042) 16:06:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x18}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x4, 0x80, 0x81, 0x5f, 0x8, @loopback, @local, 0x700, 0x40, 0x80000001, 0x380}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="03020000000000002800128009000100766c616e000000001800028006000100000000000c0002000e0000000a00000008000500", @ANYRES32=r11, @ANYBLOB="080109ee6ed8eb015a7ed5553bd6f4d8a315ff0a63951e31f1f603b0a47888e389f5c544fd2bdb024beb10ea1006ec6ccd9765ca4b9f7f450804302e3793a0db3b0602a2544629c3a0c12176f540c27756c6152eb98e226ccbefd5a771e89316f736e03e8f55746cb1aa5e4762e987a326ec72e716ec3f4238afd1a46caf223194e5182a8958cfd38568eef4ed046ec7349688b5a756d50204651d04fdaf16508021bfca1fdfeb496349e9770b36839699e88fb517b9a23fa0a68d95e2ef9c9b4e36f4cd7ea60ab8dde3231d93520da285dbcdfb16b36d7f9f423abb923b9b1c04a7c2d4efbff1", @ANYRES32=r11, @ANYBLOB], 0x58}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000004c0)={0x550, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0xfff9, 0x0, 0x6, 0x2}, {0xbd4, 0x3, 0x9, 0x1}, {0x1ff, 0xff, 0x8, 0x4}, {0x0, 0x1, 0x3f, 0x8}, {0x4, 0x8, 0x3, 0xca27}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x7f, 0x6, 0x40, 0x7fffffff}, {0x7, 0x1f, 0x7, 0x7f}, {0x401, 0x8f, 0xa7, 0x4}, {0x7f, 0xb1, 0x86}, {0x401, 0x6, 0x14, 0x4}, {0x2, 0x3, 0x5, 0x81}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x550}, 0x1, 0x0, 0x0, 0x4040800}, 0x40870) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x2}) 16:06:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x600) 16:06:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1408.428590][ T6648] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1408.537548][T31660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1408.571405][T31660] bond0: mtu less than device minimum 16:06:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x7ffffffe}) 16:06:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x700) [ 1408.632939][T31668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 16:06:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:06:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x80040000}) 16:06:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x3f00) 16:06:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xf6ffffff}) [ 1408.908545][ T6648] usb 3-1: device not accepting address 50, error -71 [ 1409.255283][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.278521][ T6648] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1409.369097][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1409.579079][ T6648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1409.759017][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1409.771439][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.789733][ T6648] usb 3-1: Product: syz [ 1409.800976][ T6648] usb 3-1: Manufacturer: syz [ 1409.811037][ T6648] usb 3-1: SerialNumber: syz [ 1409.828908][ T6648] usb 3-1: config 0 descriptor?? [ 1410.110884][ T6648] usb 3-1: USB disconnect, device number 51 [ 1410.289188][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.378674][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.528667][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.858516][ T6648] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1411.098428][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1411.298466][ T6648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1411.328612][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.458639][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1411.467712][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.481215][ T6648] usb 3-1: Product: syz [ 1411.485547][ T6648] usb 3-1: Manufacturer: syz [ 1411.494616][ T6648] usb 3-1: SerialNumber: syz [ 1411.503459][ T6648] usb 3-1: config 0 descriptor?? 16:06:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100031f156208e90f10dbd978aab8da3765e04bebba36390102030158422200010007903a0997e4fb08d3effe7aef0968575c31040000011dea4e0b00000000"], &(0x7f0000000080)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[], 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x40b}}]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) creat(&(0x7f0000000080)='./file0\x00', 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x3404c080}, 0x4080) dup2(r7, r6) timerfd_create(0x1, 0x80000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}}, 0x0) r9 = dup3(0xffffffffffffffff, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000000)={0xfffffffe, 0xafd27559a392caf7, 0x4, 0x0, 0xfffffffe, {0x0, 0xea60}, {0x2, 0x0, 0x2, 0xea, 0x0, 0x90, "d7cd3d05"}, 0x3, 0x3, @fd, 0x3, 0x0, r9}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:06:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0xff00) 16:06:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xfdfdffff}) 16:06:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) setsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f0000000080)=0x4, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x9, 0x5, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) [ 1411.551681][ T6648] usb 3-1: can't set config #0, error -71 [ 1411.565110][ T6648] usb 3-1: USB disconnect, device number 52 16:06:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xfeffff7f}) 16:06:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x1000000) 16:06:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000000)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 16:06:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2000007, 0x444340) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}) 16:06:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xfeffffff}) 16:06:47 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair(0x26, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r4, 0x4, 0x9, 0x9, 0x101, 0xe6b, 0x800, 0xfffffff8, {r6, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0xa697}}, 0x6, 0x1, 0x0, 0x7, 0x1000}}, &(0x7f0000000240)=0xb0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000080)={0x80000000, &(0x7f0000000100)="fe5917cfb2527de9c222e04ef77063f7789f6c644a54402379518010ac0e9119162600abf639f3b72d986c4a62fe60a20f46ee4807ded43e72af7306b8fbd55cd68b0bacef9c878084ee931c511d9f783db3c16fb5a765467765eab2be198208ff4cafb35905711ea75784a9ae977cc1ea012e81a86df33f6498ac92a819d524"}) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80001, 0x1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000000c0)) [ 1412.118385][ T6648] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1412.368760][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.379724][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1412.538999][ T6648] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1412.546688][ T6648] usb 3-1: too many configurations: 55, using maximum allowed: 8 [ 1412.668957][ T6648] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1412.676557][ T6648] usb 3-1: can't read configurations, error -61 [ 1412.838400][ T6648] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1413.088438][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1413.278537][ T6648] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1413.286306][ T6648] usb 3-1: too many configurations: 55, using maximum allowed: 8 [ 1413.418967][ T6648] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1413.426580][ T6648] usb 3-1: can't read configurations, error -61 [ 1413.434114][ T6648] usb usb3-port1: attempt power cycle [ 1413.440386][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.568439][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.148303][ T6648] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1414.238595][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1414.398824][ T6648] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1414.406604][ T6648] usb 3-1: too many configurations: 55, using maximum allowed: 8 [ 1414.448375][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.528241][ T6648] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1414.535831][ T6648] usb 3-1: can't read configurations, error -61 16:06:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd93901020302090222001dea4e0009050600000000000007250100000000e6463ad37ce327829c860ed32a58f1762458dc"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000080)={{0x2, 0x0, @identifier="de56f4e87f407e82458fa884b13c2d27"}}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x2000000) 16:06:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xda}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) 16:06:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xff000000}) 16:06:49 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RGETLOCK(r2, &(0x7f0000000000)={0x1f, 0x37, 0x2, {0x1, 0x4, 0x2, 0x0, 0x1, 'U'}}, 0x1f) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) sendto$ax25(r4, &(0x7f0000000040)="3ba59de191bad87c1416250abe7e0226", 0x10, 0x14, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) 16:06:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1414.697428][ T6648] usb 3-1: new high-speed USB device number 56 using dummy_hcd 16:06:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xfffffdfd}) 16:06:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x3000000) 16:06:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) r6 = accept4$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800) dup3(r4, r6, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x80, 0x8880) 16:06:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xfffffff6}) 16:06:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x4000000) 16:06:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) fstat(r0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x1) [ 1415.188268][ T6648] usb 3-1: device not accepting address 56, error -71 [ 1415.196440][ T6648] usb usb3-port1: unable to enumerate USB device [ 1415.493375][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.588238][ T6648] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1415.830832][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1416.028730][ T6648] usb 3-1: config 234 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.044672][ T6648] usb 3-1: config 234 has 0 interfaces, different from the descriptor's value: 29 [ 1416.138842][ T6648] usb 3-1: config 234 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.154784][ T6648] usb 3-1: config 234 has 0 interfaces, different from the descriptor's value: 29 [ 1416.318194][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1416.327253][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.348101][ T6648] usb 3-1: Product: syz [ 1416.352267][ T6648] usb 3-1: Manufacturer: syz [ 1416.356836][ T6648] usb 3-1: SerialNumber: syz [ 1416.528331][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.618313][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.650317][ T6648] usb 3-1: USB disconnect, device number 57 [ 1417.398086][ T6648] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1417.568182][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.638045][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1417.848062][ T6648] usb 3-1: config 234 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.861101][ T6648] usb 3-1: config 234 has 0 interfaces, different from the descriptor's value: 29 16:06:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x1012909, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0xfffffffe}) 16:06:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x5000000) 16:06:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000380)=""/151) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_enter(r8, 0x78ec, 0x4bde, 0x1, &(0x7f0000000040)={[0x4]}, 0x8) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setresuid(0x0, 0x0, 0x0) setreuid(0x0, 0x0) dup2(r10, r9) getsockopt$sock_int(r9, 0x1, 0x4, 0x0, &(0x7f0000000240)) signalfd4(r9, &(0x7f0000000000)={[0xc]}, 0x8, 0x80000) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0xc1a8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001, 0x3}) 16:06:53 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) [ 1417.968089][ T6648] usb 3-1: unable to read config index 1 descriptor/all [ 1417.980656][ T6648] usb 3-1: can't read configurations, error -71 16:06:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:06:53 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x108) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000100)=0x4) r3 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000000)={0x2, 0x200, 0x5}) 16:06:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x6000000) 16:06:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000200)={0x5, "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"}) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc0c0583b, &(0x7f0000000100)) 16:06:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x7000000) 16:06:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x2}) [ 1418.388136][ T6648] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1418.608186][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.637985][ T6648] usb 3-1: Using ep0 maxpacket: 8 [ 1418.838287][ T6648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1419.008568][ T6648] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1419.017640][ T6648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.025754][ T6648] usb 3-1: Product: syz [ 1419.030015][ T6648] usb 3-1: Manufacturer: syz [ 1419.034592][ T6648] usb 3-1: SerialNumber: syz [ 1419.042695][ T6648] usb 3-1: config 0 descriptor?? [ 1419.320168][ T6648] usb 3-1: USB disconnect, device number 59 [ 1419.648040][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.656150][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:54 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x11) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000640)="f4ee40aee1aa95bdcc4f19614f730e73eb0254b46aba9b8350a16403aa5e692ed3080185b0223fe4dcaf35287c98eee2b9480bc38c84eb1e44fb1674ebecc4f306f118eeb7504fdffed22c8c21e58c3a70ba3621817070e3398109df24e49501640c406c16f48581980fd87727758a808ec972e6f4011fc8d309b2017723fc5529a15b040e645b65d8e9ce04cba0e497de7cfa5863f0ad53175cc820f0659d8e349cb70160ec8266ceae1663b820413f18761d8cd925b082f6b6660b9a3cf2d82193dc4c40f55327f0adc2dff62d395254350a34f80c2288888c38d9243445e6d908729660e73948ef", 0xe9}, {&(0x7f0000000740)="50ab8ac5558cf6c97a35bd28a09a6c55ba55e658761e2868ea26b806ea1545266cbf76900a3d687e", 0x28}, {&(0x7f0000000780)="aa27777a9eaed45eb571077aeed878a91e751011f4d2f1d445139dcbda558dbc292cf6d7bf94227658b1a5ff23ab8b4c2ce4b1a25bb4895ca38efd93e0e4fa19bd0ac666", 0x44}, {&(0x7f0000000800)="255d8884564067f678604354eb319b0bc08a92db2bc96143e72b2f3fac72a14d74c5580ae860ff0c18eec6c40a2db5e410855a158dd60c85761da3e8cf12b45dc9da2d505b40956f3ab68c280199872a29f1266b896a1fa1b3b4a630b5a1937e3dcf7694f305048dead449b1f1bd4b0b2d3adc483c07b44ce47cbeefe94339d511e7e47984756c68951b6d1939fc0aedd017335d410ad6554b0f240ecded132cb7d15e7e5e3b2fb6e134624b", 0xac}], 0x4) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"/1088], 0x440}, 0x1, 0x0, 0x0, 0x20040011}, 0x22000800) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)) 16:06:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x0, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000000)={@loopback, @local}, &(0x7f0000000040)=0xc) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000080)={'team_slave_1\x00', {0x2, 0x4e20, @loopback}}) 16:06:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x8000000) 16:06:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x3}) 16:06:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:06:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r3, 0x417, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000440)=""/218, 0xda, &(0x7f0000000300)=""/123, 0x3, 0x1}}, 0x48) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc0) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff6b1602664d7816108e90f10dbd9390102030109022200010007903f09040000011dea4e0009050600000000000007"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x3f000000) 16:06:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8000001, 0x220800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 16:06:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x4}) [ 1419.969489][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:06:55 executing program 4: ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fffffff}) 16:06:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0xff000000) 16:06:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x5}) 16:06:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, r4, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="50010000", @ANYRES16=r4, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x2040090}, 0x1) 16:06:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x100000000000000) 16:06:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) delete_module(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x81}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSRS485(r6, 0x542f, &(0x7f0000000140)={0x0, 0x3ff, 0x2}) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1d) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) acct(&(0x7f0000000000)='./file0\x00') 16:06:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x6}) 16:06:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1420.357980][ T2505] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1420.647884][ T2505] usb 3-1: device descriptor read/64, error 18 [ 1420.694129][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.047847][ T2505] usb 3-1: device descriptor read/64, error 18 [ 1421.317857][ T2505] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1421.587836][ T2505] usb 3-1: device descriptor read/64, error 18 [ 1421.728586][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.997799][ T2505] usb 3-1: device descriptor read/64, error 18 [ 1422.118792][ T2505] usb usb3-port1: attempt power cycle [ 1422.687880][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.767918][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.827810][ T2505] usb 3-1: new high-speed USB device number 62 using dummy_hcd 16:06:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:06:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x200000000000000) 16:06:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) getsockopt$sock_int(r7, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208900}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x140, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4840}, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:06:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffe, 0x2}) 16:06:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x7}) 16:06:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) [ 1422.937831][ T2505] usb 3-1: device descriptor read/8, error -71 16:06:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x8}) 16:06:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x300000000000000) 16:06:58 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x1b0001}, [@ldst={0xffffffbd, 0x2, 0x4f04}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x481, &(0x7f00000001c0)=""/195}, 0x48) r2 = dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x28, r4, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x2a4, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x11c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x221ffe7b897eb33a}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x10}, 0x4840) io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0x1d45, 0x8, 0x3, 0xa8, 0x0, r2}) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000000c0)) lseek(r5, 0x8f18, 0x4) 16:06:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x300}) [ 1423.168014][ T2505] usb 3-1: device descriptor read/8, error -71 16:06:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x400000000000000) 16:06:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x500000000000000) [ 1423.657729][ T2505] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1423.773323][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1423.807896][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.998170][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1424.177781][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1424.195752][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.204173][ T2505] usb 3-1: Product: syz [ 1424.214899][ T2505] usb 3-1: Manufacturer: syz [ 1424.219814][ T2505] usb 3-1: SerialNumber: syz [ 1424.235085][ T2505] usb 3-1: config 0 descriptor?? [ 1424.520278][ T2505] usb 3-1: USB disconnect, device number 63 [ 1424.848082][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:00 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x58, 0x0, 0x2}) r5 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/142, 0x8e}], 0x1) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x1000, 0x5}}, 0x28) 16:07:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x480}) 16:07:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x600000000000000) 16:07:00 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x183200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000300)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r3}) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) dup2(r6, r5) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000040)=0x400) 16:07:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0xe947, 0x4, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x200, 0x0) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{&(0x7f0000000300)="50c7af5d21cfb95ceac218461935bfac33c4a2b4695f8ac3a3b94d9cd6ed7f2a1949601f6d046f54df0bf770910f4c630d44ceda4d86bf696c1b6cd160f22daeccea61cf120c0001402031d9e1a7e9b7c928d65895324bc46a", 0x59, 0x6}, {&(0x7f0000000380)="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", 0x1000, 0x3}], 0x4, &(0x7f00000013c0)={[{@fat=@errors_remount='errors=remount-ro'}, {@nodots='nodots'}, {@fat=@dos1xfloppy='dos1xfloppy'}], [{@fsmagic={'fsmagic'}}, {@appraise_type='appraise_type=imasig'}, {@permit_directio='permit_directio'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/dri/card#\x00'}}, {@appraise='appraise'}]}) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000040)={{0x2, 0x2, 0x7, 0x1, 0x1}, 0x10001, 0xfffffffffffffffa}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:07:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x500}) 16:07:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x700000000000000) 16:07:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x240000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f00000000c0)=0x10208001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000000140)={{0x0, 0x1f}, 0x0, 0x1, 0x9, {0x1f, 0x2}, 0x90, 0x9}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r11, r10) getsockopt$sock_int(r10, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x4e22, @broadcast}}}, 0x88) 16:07:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x800000000000000) 16:07:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x53b}) [ 1425.234779][T31990] FAT-fs (loop5): Unrecognized mount option "fsmagic=0x0000000000000000" or missing value [ 1425.338750][T32001] FAT-fs (loop5): Unrecognized mount option "fsmagic=0x0000000000000000" or missing value [ 1425.377831][ T2505] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1425.617620][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1425.735297][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.828235][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1425.893031][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.028098][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1426.037148][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.057595][ T2505] usb 3-1: Product: syz [ 1426.061763][ T2505] usb 3-1: Manufacturer: syz [ 1426.066346][ T2505] usb 3-1: SerialNumber: syz [ 1426.092841][ T2505] usb 3-1: config 0 descriptor?? [ 1426.370008][ T2505] usb 3-1: USB disconnect, device number 64 [ 1426.937867][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.137791][T32441] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1427.387534][T32441] usb 3-1: Using ep0 maxpacket: 8 [ 1427.607568][T32441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1427.788820][T32441] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1427.797909][T32441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.805866][T32441] usb 3-1: Product: syz [ 1427.811018][T32441] usb 3-1: Manufacturer: syz [ 1427.815627][T32441] usb 3-1: SerialNumber: syz [ 1427.822909][T32441] usb 3-1: config 0 descriptor?? [ 1427.967708][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="e6a100"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4800, 0x1a3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 16:07:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x3f00000000000000) 16:07:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x600}) 16:07:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sysinfo(&(0x7f0000000380)=""/180) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$sock_int(r4, 0x1, 0x0, 0x0, &(0x7f0000000240)) splice(r1, &(0x7f0000000000), r0, &(0x7f0000000040)=0x7, 0x3, 0x3) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x8, 0x100) [ 1428.079003][T32441] usb 3-1: USB disconnect, device number 65 16:07:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x39, 0x0, "bdb90a8e66b850054b1654f8756c62da43948eaa87d2bd12af085fe921fe994df0e7789fbe4da1dbe92e14ffe8f9088481440383faca08d1814b6ea7014911df0e54db1897140db3235740665cc6ba9f"}, 0xd8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) connect$llc(r3, &(0x7f0000000080)={0x1a, 0x305, 0x9, 0x0, 0x20, 0x6}, 0x10) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x2000, 0x1, 0x2000, 0x2000], 0x2000000000000006, 0x1, 0x8465}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 1428.126632][T32041] mmap: syz-executor.4 (32041) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 16:07:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0xff00000000000000) 16:07:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x700}) 16:07:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0xff}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) getsockopt(r3, 0x9, 0x6, &(0x7f0000000040)=""/175, &(0x7f0000000140)=0xaf) 16:07:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x3b05}) 16:07:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x453, 0x800, 0x70bd2b, 0x25dfdbfe, "92a74b8bfd0c179dd6b11d543cde79bce4871717eb373888b624df3e438465b31d17fdb0178fb723d17579dfa11e63fd", [""]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x804) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x140c, 0x800, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 1428.610477][T32441] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1428.771190][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.867450][T32441] usb 3-1: Using ep0 maxpacket: 8 [ 1429.008057][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.029237][T32441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1429.107558][T32441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1429.267482][T32441] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1429.276542][T32441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.285214][T32441] usb 3-1: Product: syz [ 1429.289912][T32441] usb 3-1: Manufacturer: syz [ 1429.294483][T32441] usb 3-1: SerialNumber: syz [ 1429.304782][T32441] usb 3-1: config 0 descriptor?? [ 1429.568210][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.590040][T32441] usb 3-1: USB disconnect, device number 66 16:07:05 executing program 2: sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r2, r4, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x8004}) 16:07:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x305082, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x86, 0x0, {0xffffffffffffffff, 0x1, 0x8, 0x3, 0x3f}, 0x7ff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:07:05 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x3b}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040804}, 0x4008000) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 16:07:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = creat(0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r2, 0x3}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) ioctl$sock_proto_private(r4, 0x89e5, &(0x7f0000000200)="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") ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={r2, 0x1}) [ 1430.047585][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xff00}) 16:07:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x505001) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:07:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x81, 0x800) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:07:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x6, 0x800, 0x0], &(0x7f00000000c0), 0x3, 0x400, 0xbbbbbbbb}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000200)={{0x1, 0x200, 0x5, 0x95, 0x8, 0x10a4}, 0x1de, [0x1, 0x401, 0xfffffff7, 0x8d91, 0x47, 0x5, 0x2, 0xb17, 0x80000001, 0xffffffff, 0x8001, 0xa3, 0x40, 0x1, 0x5, 0x2, 0x0, 0x9, 0xf787, 0x1, 0x9, 0x0, 0x10001, 0x101, 0x6, 0x401, 0x0, 0x0, 0x0, 0x8, 0xf618, 0x9544, 0x3, 0x8, 0xfb, 0xffff, 0x2, 0x6, 0x6f231d8, 0x800, 0x1, 0x200, 0xfffffc01, 0x2, 0x252, 0x2, 0x9, 0xffff7fff, 0x0, 0x3, 0x6a, 0x80000001, 0x7, 0xff, 0x2, 0xed, 0x593, 0x4, 0xffffffff, 0x6, 0x24800, 0x81, 0x9, 0x9, 0x20, 0x7, 0x66b, 0x8, 0x20, 0x8, 0x0, 0x1fa, 0x0, 0x2, 0x8, 0x9, 0x401, 0x7, 0x8001, 0x0, 0x9, 0x1, 0x2, 0x755ec29, 0x1e, 0x6, 0x5, 0x3, 0xe2, 0x0, 0x7, 0x6, 0x80, 0x9, 0x3, 0x8, 0x8, 0x9, 0x2, 0x9, 0x4, 0x8, 0x3f, 0x6, 0x3, 0x4, 0x3, 0x3, 0x81, 0x0, 0x0, 0x5, 0xff, 0x10000, 0x6, 0x10001, 0x3, 0x2, 0xfffffffa, 0x3, 0x100, 0xce, 0x40fb, 0x4, 0x1, 0x101, 0x80000000, 0x4, 0xa80, 0x6, 0x2ed0, 0x1, 0x6, 0x10001, 0x9, 0x6, 0x81, 0x2e6d59e3, 0x1, 0x6, 0xd02, 0x7ff, 0x4, 0x8, 0x8a3d, 0x2, 0x9, 0x0, 0x4, 0x5, 0xff, 0x4, 0x10000, 0x5, 0xfff, 0x93a9, 0x8, 0x4a, 0x401, 0x7ff, 0x7, 0x24, 0x2, 0x4, 0xa08d, 0x4, 0x5, 0x7f, 0x2, 0x2, 0x1, 0x6, 0x100, 0x7fff, 0x1, 0x3, 0x4e7, 0x8, 0x200, 0x9, 0x7f, 0x8, 0x100, 0x6, 0x2, 0x1, 0x101, 0x8, 0x200, 0x7, 0x6adf, 0x5, 0x7fff, 0x8, 0x9, 0x6, 0xfff, 0x1000, 0x8, 0x8, 0x5, 0x8, 0x101, 0x0, 0x7ff, 0xfff, 0x80000001, 0x1000, 0x9, 0x56, 0x6b, 0xfff, 0xa4d, 0x7, 0x7fffffff, 0x7, 0x8, 0x9, 0x5, 0x7fffffff, 0xfffffffa, 0x6, 0x6, 0x1, 0x5, 0xffffffff, 0x6b07b7a, 0x4, 0x173, 0x7, 0x3, 0x7, 0x2, 0x17e0873d, 0x81, 0x0, 0x4, 0x800, 0xfffffffe, 0xfffffff9, 0x6, 0x1, 0x401, 0x1000, 0x9, 0x1000, 0xffffffc1, 0x6000, 0x8a1e, 0x6, 0x4, 0x3, 0x0, 0x8001, 0x8, 0x6, 0x9e0, 0x7, 0x8001, 0x0, 0x6, 0x1114, 0x6, 0x7, 0x6, 0xff, 0x7f, 0xc58d, 0x18, 0x2, 0x2, 0x1, 0x8, 0x7, 0x5, 0x7, 0x8000, 0xfff, 0x1ff, 0x59a, 0x9, 0x5, 0x9, 0x42e, 0x9, 0xad3, 0xcf, 0x80, 0x1ff, 0x72, 0x5, 0x6, 0x1, 0xe6, 0x136, 0x6, 0x0, 0x6, 0x8, 0x1, 0x7, 0x2, 0x2, 0x4, 0x7f, 0xffffffff, 0x8, 0x3, 0x101, 0x7, 0x5, 0x0, 0x8, 0x4, 0x5, 0x8, 0x8, 0x4, 0x0, 0x4, 0x1ff, 0x8000, 0x5, 0x10c62b5e, 0x1, 0x1f, 0x80000001, 0x2, 0xffff, 0x7f, 0x20, 0x1000, 0x101, 0x3, 0x0, 0x1f, 0x2, 0x9, 0x101, 0x0, 0xffffffff, 0x4, 0x1f, 0xfffffffe, 0x6, 0x9, 0x2, 0x401, 0x6, 0x7, 0x3, 0x2, 0xff, 0x80000000, 0x6, 0xeb4c, 0x23, 0x6, 0xffff7fff, 0xb303, 0x6, 0x4, 0x2, 0xfffffff8, 0x8751, 0x6, 0xfffffffc, 0x6, 0x8001, 0xfff, 0x8f2, 0x2, 0xa71b, 0x5, 0xeaf, 0xfffffff8, 0x8, 0xff, 0x6, 0x0, 0x3, 0x5, 0x1, 0xfb43175, 0x4, 0x0, 0x4, 0x2, 0x4, 0x7, 0x3, 0x3f, 0xe, 0x4a, 0x6, 0x5, 0x5, 0x4, 0xffffffe1, 0x4, 0x3, 0x8, 0x40, 0x1, 0x10000, 0x400, 0x5, 0xffff, 0x77bd, 0x0, 0x80000001, 0x7e, 0x80, 0x2, 0x8, 0xfffff27a, 0x6, 0x4, 0x1, 0x3c, 0x12d, 0x400, 0x2, 0x5, 0x7, 0x1d3, 0xf9, 0x1, 0x8, 0x5ac, 0x3f, 0x4, 0x0, 0x6, 0x2b, 0x800, 0xfff, 0x8a8, 0x9, 0x7, 0xc2d, 0x9, 0x6637, 0x4f3, 0x6, 0x7, 0x5, 0x3, 0x80, 0x0, 0x5, 0x3f, 0x9, 0x4, 0x1000, 0x4, 0x774, 0xffffffff, 0x4, 0xf619, 0x3dd, 0x80000001, 0x1, 0x4, 0x2, 0x2, 0x7f, 0x9, 0xfffffffa, 0x76, 0x1, 0x6a, 0x10000, 0x29cb, 0x2, 0xfff, 0xfffffffc, 0x7, 0x7, 0x8000, 0x5, 0x8, 0x17affd7f, 0x2b7da262, 0xffffff01, 0x77af, 0x1741, 0x5, 0x3, 0x3a, 0x9, 0x2, 0x80, 0x800, 0x6, 0x7, 0xfd4d, 0x7fff, 0xfffffffc, 0x80000001, 0x61b, 0x4, 0x3f, 0x52, 0x987e, 0x324fd242, 0x7, 0x200, 0x2, 0x401, 0x1, 0x3ff, 0x4057a8e0, 0x0, 0x1, 0xa5, 0x7, 0xffffff60, 0x2, 0x7, 0x0, 0x1, 0x83, 0x88, 0x56300d1d, 0x7631, 0x0, 0x6f2b, 0x4, 0x3, 0xd5ca, 0x9, 0x401, 0x6, 0x5, 0x2, 0x9, 0x1ff, 0x2, 0xfffff801, 0x7bb, 0x80, 0x3, 0x9, 0x9, 0x9, 0x9, 0xc5457fa, 0x5, 0x5aa3, 0x7, 0x5, 0x7, 0x2f, 0x7, 0xfb, 0x6, 0xffffffff, 0xfffffffb, 0x6, 0x8001, 0x3, 0x7, 0x101, 0x7, 0x40, 0x5, 0x5, 0xfffffffa, 0xffffffe1, 0xb67, 0xeada, 0x3, 0x8, 0x0, 0x80000001, 0x80000001, 0x10000000, 0xff, 0x2, 0x6, 0x0, 0x1000, 0x6, 0x4592025e, 0x5, 0x1, 0xd6, 0x1, 0x8, 0x2, 0x1, 0x8001, 0x1ff, 0x4, 0x80, 0x4a, 0x100, 0x4, 0x2, 0x80000001, 0x2, 0x7, 0x8, 0x6, 0x64c3, 0x9, 0xe5b, 0x4, 0x8, 0x5, 0x0, 0x0, 0x2, 0x9, 0x4, 0xf82b, 0x1000, 0xdc, 0x1f, 0x1, 0x40, 0x3, 0x400, 0x80000000, 0xffffffff, 0x6, 0x3ff, 0x2edc, 0x6, 0x38, 0x7fffffff, 0x6, 0x0, 0x4, 0x2, 0xff, 0x6, 0x80000001, 0x10000, 0xfffffff7, 0x80000001, 0x80000001, 0x3, 0x6c88, 0xf1d5, 0x3, 0x10000, 0x7, 0xbbda, 0x2, 0x3, 0x80, 0x0, 0x1, 0x8, 0x5578, 0xeb5b, 0x1, 0x81, 0x6d, 0x1000, 0x101, 0x2a0, 0x101deb26, 0x7, 0x3ff, 0x1f6, 0x7fffffff, 0x9, 0x6, 0x0, 0x80000001, 0xffb, 0x800, 0xffff7fff, 0x1, 0x0, 0x1ff, 0x798f53c7, 0x3, 0xc0000000, 0x10001, 0x91d2, 0x9, 0xe6, 0x7fff, 0x1, 0xffffffe0, 0xffffaef8, 0x4, 0x3, 0x2, 0x3bee0000, 0x9e69538, 0xdaf, 0x3, 0x6, 0x0, 0xba5, 0x9e4d, 0xb6, 0x8000, 0x8, 0x2cc2, 0xffffffff, 0x8000, 0x5, 0x0, 0x5, 0x7436, 0x4, 0x5, 0x7, 0x1f, 0x3, 0x15, 0x4, 0x20, 0x200, 0x6, 0x8, 0x1, 0x5705, 0x1, 0xd8, 0xfffffffd, 0x8, 0xffff0000, 0xffff0001, 0xbf2, 0x40, 0x5, 0x80000001, 0x0, 0x1, 0x7f5, 0x7fff, 0x7fffffff, 0x1, 0x5, 0xe6, 0x8, 0x3, 0x80000000, 0x200, 0xffffff01, 0x1f, 0x8, 0x1, 0x3, 0x7fffffff, 0x3, 0x7, 0x0, 0x8, 0x40, 0x8, 0x8, 0xd23, 0x786a, 0xffff017c, 0x3, 0xff8000, 0x3, 0x8, 0xfffffffe, 0x8, 0x80000000, 0x6, 0x10001, 0x2, 0xfffffffd, 0x0, 0x6, 0x1, 0x2, 0x3, 0x3, 0x0, 0x1, 0x8, 0xfbf, 0x3, 0x8000, 0x2, 0x7, 0x5, 0x401, 0x1f, 0x6, 0x3438, 0x5, 0x1, 0x47, 0x2, 0x4, 0x8, 0xffff, 0x0, 0x3abc, 0x6, 0x6, 0x3, 0x2, 0x0, 0x9, 0xfffffffb, 0x296, 0x5, 0x3b43, 0x2, 0xffffffb7, 0xa932, 0x7fffffff, 0x1de4c568, 0x8, 0x4, 0x0, 0x2, 0x8, 0x9, 0x7fc1, 0x2, 0x1, 0xe1, 0xed5, 0x5, 0x7fffffff, 0x6, 0x2, 0xfffffffc, 0xfffffff9, 0x800, 0xfffffff9, 0x8, 0x8, 0x2, 0x400, 0x7, 0x7, 0x8, 0x40, 0x7, 0x95ce, 0x3, 0xbd23, 0x7000000, 0xff, 0x80000000, 0x4, 0xfffffffa, 0xfffffffb, 0x8, 0x4, 0x7, 0x3, 0x400, 0x40, 0x3, 0x1, 0x8, 0x3ff, 0xf7, 0x9, 0x10000, 0x7, 0x6, 0x4, 0x3626, 0x552c, 0x0, 0x5, 0x3, 0x2, 0x7a, 0x8c1, 0xac, 0x8, 0x400, 0x8, 0x7fffffff, 0xffffffff, 0x20, 0x860d, 0x8, 0xab08, 0x1, 0x7e7, 0x4, 0xec9, 0x893, 0xffffffff, 0x0, 0x3f, 0x401, 0xfffff800, 0xffffffff, 0x400, 0x10000, 0xffff0001, 0x0, 0x4, 0xffff4f7a, 0x0, 0x40, 0x101, 0x1, 0x0, 0x8, 0x1, 0x7ff, 0x5, 0xffff0001, 0x7, 0x0, 0xb50d, 0x200, 0x81, 0x2, 0x6, 0x20, 0x10001, 0x1, 0x4, 0xfffffffa, 0x3, 0x9, 0x8d0e, 0xefe, 0x7700, 0x1d7903a1, 0xc58, 0x3, 0x80, 0x1, 0x2, 0xffffffc1, 0x4000000, 0x3, 0x3, 0x8001, 0x2, 0x8, 0x9, 0x80000001, 0xffff, 0x0, 0x1, 0x5, 0x0, 0x8, 0x82400000, 0x6, 0x4, 0x6, 0x0, 0xffffffff, 0x1000, 0x3, 0x7fffffff, 0x2, 0x67, 0x1000, 0x3f, 0x99a, 0x9, 0x20, 0x4, 0x400, 0xda, 0x5, 0x7f, 0x7fffffff, 0x6, 0x3, 0x3, 0x180000, 0x7, 0x5, 0xffff9b47, 0x8, 0xffffffff, 0x5, 0x7ff, 0x9, 0x49b, 0x759edf76, 0x1, 0x1, 0x0, 0x0, 0xe372, 0x6, 0x5, 0x1, 0x3, 0x5, 0x4, 0x349, 0x7, 0x40, 0x0, 0x6, 0x1000, 0x650ab6c, 0x5, 0x5, 0x2e, 0xfffff800, 0x1, 0x4, 0x80, 0x7, 0xac7b, 0x40, 0x5c, 0x9, 0x5, 0x3, 0x0, 0xff, 0x8000]}) 16:07:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x1000000}) 16:07:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x309120) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdirat$cgroup(r6, &(0x7f00000001c0)='syz1\x00', 0x1ff) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000080)=0x71) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x4, 0xffffffff00000001, 0x800, 0x4, 0x80000000, 0x7fff, 0x8001, 0x6, 0xfd9, 0x7, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x4, 0x1, 0x100000000, 0x7], 0x100000, 0x86a12}) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x7) [ 1430.447425][ T2505] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1430.717393][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1430.920444][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1431.087470][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.098354][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1431.117300][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.125276][ T2505] usb 3-1: Product: syz [ 1431.130796][ T2505] usb 3-1: Manufacturer: syz [ 1431.135391][ T2505] usb 3-1: SerialNumber: syz [ 1431.142310][ T2505] usb 3-1: config 0 descriptor?? [ 1431.433227][ T2505] usb 3-1: USB disconnect, device number 67 [ 1431.817405][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.127440][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.177274][ T2520] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1432.437280][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1432.657963][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1432.857485][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1432.866550][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.874892][ T2520] usb 3-1: Product: syz [ 1432.879179][ T2520] usb 3-1: Manufacturer: syz [ 1432.883806][ T2520] usb 3-1: SerialNumber: syz [ 1432.893798][ T2520] usb 3-1: config 0 descriptor?? 16:07:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x2000000}) 16:07:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:08 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000040)={0x7ff, 0x100}) r6 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_ENUMINPUT(r9, 0xc050561a, &(0x7f00000000c0)={0x9, "e818779762cc6495e330b387ffeb1ab06f31611f0f68732a84c9f866f49a30ce", 0x1, 0x3, 0x4, 0x3000000, 0x2020902, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$cgroup_ro(r12, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0xae03, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80010, r6, 0x82000000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x80}, &(0x7f0000000180)=0x8) 16:07:08 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f0000000080)=""/68, 0x44}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000580)=""/111, 0x6f}], 0x8, &(0x7f0000000680)=""/254, 0xfe}, 0x1}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/24, 0x18}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000900)=""/41, 0x29}, {&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/63, 0x3f}], 0x6, &(0x7f0000001b00)=""/5, 0x5}, 0x2}], 0x2, 0x2000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc0c0583b, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001c00)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, r3, 0x220, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c044}, 0x20004000) [ 1433.162931][ T2520] usb 3-1: USB disconnect, device number 68 [ 1433.167447][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x3f, 0x5, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) sendto$x25(r2, &(0x7f0000000080)="ddce2a4d2d1ac1415af1aada5ac6e15bf6aa49a8d6c359afc2d149cc74972396987fb3b7fb1db8", 0x27, 0x8000, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x9) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000002380)={0x5, 0x0, [{0x11b002, 0x46, &(0x7f0000000000)=""/70}, {0x2000, 0x100e, &(0x7f0000002440)=""/4110}, {0x0, 0x1000, &(0x7f0000001200)=""/4096}, {0x1000, 0x8b, &(0x7f0000002200)=""/139}, {0x100000, 0xa6, &(0x7f0000000200)=""/166}]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat(r8, &(0x7f0000000180)='./file0\x00', 0x80200, 0x4) ioctl$EVIOCGBITSND(r9, 0x80404532, &(0x7f0000000300)=""/138) 16:07:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x3000000}) 16:07:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000080)={0x0, 0x0, 0x3018}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) socketpair(0x1, 0x4, 0xfffffffe, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c0d5}, 0x1) r8 = dup2(r7, r6) r9 = dup3(r7, r3, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KDSKBSENT(r8, 0x4b49, &(0x7f0000000380)={0x4, "fdf113310503ae77cd3c6cddf9df300447719113f3cc883709933e7af2086adc2be2d96143296e700b08b80148ff7898b9e574ea426793ac0a6779d9ecdacb934f71d6afd46e5e39892de7da5d3c949df549d6caa8d9b0b2d9b0e22ff7adf0c299e9ce6a82206422cd13fcd5836c3b1d5f688eae6f37c624f89a4a7df1940bb6cb93bfb7cfc05d4cf601b50704b476c2c53ca197917639d5262815e307c57e2022fd5192bcef9f8c07e00579594c6cd84828f4077eb271a126e9256af19f98cda7cc9480167cd70d9ce1a0d3c3a352baa5a51766e7ca9c9ae70ced75659c857c71b94f6054d74e947eec50cbf5e8d4f8f1bea510a82713015bfe44407ef4e7c39d2408ce5b5b5a5ce96928ada2ded2d46a0a843a760451496a54314ec8a6020b8dabb079a0dacb4f6e47882a062e14e009844c259a004ea2df7b4205d27adfb22fdc0b7e2700ec3a57bfe6f6c89c05d36111764d33e683f4a414216b65651bedd2a27ecb56361eb2842382c05f4c9a2bf780e63da5f83c7aee01b2c60aa8e00d0f9c3d6ea97a7a8b913a8c9684c51b69e2084bef7ab54b25d76c7141fc3f3db23b5ab5862deae0d9f19ce1206db2f2b76aa32467269ec9e2021c661ac6ba5babaab06c79f1c0d0b7f08580954833e06598c43f0d98db7b0f95999c1d2a1ee6c3a20be3ec4f8525a2f5f6b20f8670a49003805891ae98c511962cd5f9a8364a88"}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) unlinkat(r9, &(0x7f0000000040)='./file0\x00', 0x200) r10 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x4000) epoll_create1(0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r10, 0xc01064b3, &(0x7f00000000c0)) 16:07:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x4000000}) 16:07:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000100)) socketpair(0x1, 0x5, 0xfff, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r0) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) r8 = dup2(r7, r6) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) pwritev2(r4, &(0x7f0000000080), 0x0, 0x3, 0x80, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800d10400d9f3206d00001000030400000000003885991e95fcd250c36b1999a90e34c8968e54bdd7169dd809a8e57dbc1edbaf0ecdfa6c56d72ee90a4c36c56413de2163168f1ca5111a9f4e0417805150af8f3cceeed3c2e9837e2aabbf914d2ae091fd16c634157eb22e24f8f7c1fd26ef91e1d2e0b6bc411b1c1091582e659de40b1854411a034cc4d95a4e07529c86edb9f5d35f466e34f20d25d8b91058", @ANYRES32=0x0, @ANYBLOB="03020000000000002800128009000100766c616e000000001800028006000100000000000c0002000e0000000a00000008000500", @ANYRES32=r10, @ANYBLOB="08f90fdf09f900000000000000000000000000f7cb438024c75159f3f9b69373c5f39b37ccf97cbed1cd102beffed9ccc207f55c2d75", @ANYRES32=r10, @ANYBLOB], 0x58}}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0xfffffff7, 0x2, 0x2, 0x50, r8, 0x2, [], r10, r11, 0x4, 0x1, 0x1}, 0x40) 16:07:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x3, 0x80800) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c12a126fc1a2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bcede3294f6e73d06ad16dc2d26725ff833b5b93b499918e6a6ec245b781d41aee9624c847e2f2312d6a1db45bad354fc1a3f20340547860f97d30d407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41eb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090234aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc68c8079019996f5e65cab354149d9107d8a88b0aa5b5661555f00443aee5e71400f6cea433f06c0240a9de82918613c72a060ed270c7eecabb69e5fbe797157f6a334c03b0d2da30c86947a5a5f705017defd9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r9, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r3, 0x10, &(0x7f0000000340)={&(0x7f0000000240)=""/223, 0xdf, r9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x1, &(0x7f0000000040)=@raw=[@generic={0x78, 0x8, 0x9, 0xda, 0x100}], &(0x7f0000000080)='syzkaller\x00', 0x400, 0x9c, &(0x7f00000000c0)=""/156, 0x40f00, 0x5, [], 0x0, 0x8, r6, 0x8, &(0x7f0000000180)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x1, 0x7, 0x1}, 0x10, r10}, 0x78) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000000)=0x4) [ 1433.656101][ T2520] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1433.897226][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1434.097704][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1434.207324][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.287673][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1434.296745][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.305010][ T2520] usb 3-1: Product: syz [ 1434.310421][ T2520] usb 3-1: Manufacturer: syz [ 1434.315038][ T2520] usb 3-1: SerialNumber: syz [ 1434.323162][ T2520] usb 3-1: config 0 descriptor?? [ 1434.602262][ T2520] usb 3-1: USB disconnect, device number 69 [ 1434.847274][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:10 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff60102030109022200010007903f090400018000004e0009050600000000000007250100"/52], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x5000000}) 16:07:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x101200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0xc1a1, &(0x7f0000000040)=0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:07:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x608b00) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xb8, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0xb8}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r2 = creat(0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r3, 0x3}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={r3, 0x1}) 16:07:10 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000003701000162d6ba9e01f956d08d21070000000000000000100000000000f8", @ANYRES32=0x0, @ANYBLOB="0000cf6b88dba3f89e6dbf064e78e884f4dbcadab3b18e2baf0100000020bf6f570a1d77b2213fc4ca000000000000000000da3aafb79d9d1c7cddfea2f16803a905b4fb9191db31796693c722dc269218dd183d4ff24192fd50f1e58c6f17d105eac528d79f7ccc4e69f3f797ba371cf6f1d558a70239c405570e507497d5222489adb20db3513e79c07e665c2af8706b8c512039f311884d378e146017645bf67de39ca1f0b663112d6406b6995d"], 0x1e) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$vsock_stream(0x28, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000080)={r5, r6, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000000c0)) 16:07:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x4b4e00, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x6000000}) 16:07:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}) [ 1435.250748][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x100000000, 0x80000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x4, 0x0, 0x4f}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2000000200, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 1435.507153][T28312] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1435.787399][T28312] usb 3-1: device descriptor read/64, error 18 [ 1436.197086][T28312] usb 3-1: device descriptor read/64, error 18 [ 1436.287460][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.477088][T28312] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1436.780578][T28312] usb 3-1: device descriptor read/64, error 18 [ 1437.177024][T28312] usb 3-1: device descriptor read/64, error 18 [ 1437.308392][T28312] usb usb3-port1: attempt power cycle [ 1437.337150][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.891416][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.016966][T28312] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1438.107290][T28312] usb 3-1: Invalid ep0 maxpacket: 2 16:07:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x2) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) 16:07:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x7000000}) 16:07:13 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x8, {0x7, 0x1f, 0x10001, 0x200000, 0x1000, 0x3d, 0x86c8, 0x44c}}, 0x50) 16:07:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xa0000, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x7, {0x0, 0x16}}, 0x20) 16:07:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r6 = dup2(r5, r4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) r9 = dup2(0xffffffffffffffff, r6) ioctl$KVM_SET_TSC_KHZ(r9, 0xaea2, 0x9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000000040)) write$midi(0xffffffffffffffff, &(0x7f0000000380)="17453550252eeafa936634532a2e40ac5efcf333b05d2aa0503d786c6b76c26f93df36a52c7a6272987b2c68a5769e3a22f4d6af126ff50774e82c921e9b6bbb44b7a2cc8d2ad22e626b1bae727ba96d17c01ff4c30bd6d8da861162117d4b6e0f02d5978888651feccce08c7ddc6e96504a5798691e2fa3889204974b172b9b2accda8e1d687adce99e78888a95102f01d5382ec59a9ad59b20169151bda1f58ebeeb29b22e6533d1c46bd4dfbb682eb073cdcb6bafacbbe2a5b88cf690704670fc278108e0dd0ce64d580ee51949f4d4142637b1f6113f0546ef48f10f0455511ae0e855c9250ed53c373e636b0baee1617ac07d050d5d417a3000deacf5a606f2c29832f0b8b38e43525bc3eea32e5b90dd9b688a90a4ead56dba930f259ae902e7516e7cbb04e2ca9ee93766a10d9c165e8501e5ca35f762b057f419c17686cca6756500a14421d1a2e4c9d5062d0f3f80ceadfbf2a07f5172c6b92d4a63e3ebea8cde380537ae1ee946286b70ec542f4fc8e95e2cca7b5ccb2e1899f3746c1af211604cda9e7c4f0dbb9f97641125f57d92c527f501d83c671cece11a6fd13e5085bafb011e0bf1d4c678a3727e3942dd1ca6ec6738ef633d10924396418a342b042c27937f16ee0b07784ce2682f4080170dd31f393fece00a436cc763f511c9872d9d03b69da2b3a00bb49fe42ac8394d62fa1e044d8af23da207583a780337e729ff8b261d3a51bd6bc15d0cca234b2fe76f72d676e92945f53a07d1a17b75be5e7b5c39d6ef9b3eed1a5b5e8e9b316f7748a625f39d180e59c663740a6311d3d294037542497f2dc49bb7fe2eb7b688e4bf7b3a844f148477d3c41e734590a5fc97f58606b3a49cf5f9daa960d61e9ae909d85574278b54bdeadb04cb8bd57c424cd0c445a8c571a4b7d4156943c9058056534e86a9e22b560a52a9c8c8c20bbd9855586cf4ebda97954f312ff032139091d3dca51d54e644c31182800fda66a40c0b5404cfefbbec00dae78ce1cc94225bcb1c121a86571ea4e80d3509ce9d7f87af08d8b7756b9f549bc8392e408e22c8739fd7b333045eacaa2da216f2ec7cc82ef0c8b95ed1f80b3608ae45cea396d6bb6dcbd6c6474edc07cd09f2a55410c47b5824cff80f5f3f2edbe5c7b227b570bb627fc5388d4df270ad786e8487399c577c622bdc7b79647444d684238ed9dff244ef734a5ed9b941bdf0f150e8789d720a7dd7abd8731a021fae50e0f8308c3be05c746e38ac1a94c4ac47278c17a50dbb201310c3bb5ef8771a2911d6610d81c727f500b98a662d5ae110b82f05229a751f298dab005d3861e848966f06b039d4a9dfbaa407e2f9321d1a7c104c96c882fb8f647c52b5b066b2cfd7c3c5d1d687b0d0fd0854df7547017ff32de1fdfa476b1fd625ee83b50e03b39c94c4758888453fd3614dbac36c078ab3fb8a24e77f90ac7aaba7d12ae3707f3299d8e4001e5306c9f1158f4cc03dd94afaca2956d25bd7de3f933044360e8909b2272ffeba4404d93b7b26a324edaf4fe0c5b826580432664441ecd69b76b2bce68157a1a40655697f83d19fec470d6b4d8e6405107f4030b61f36c60ce13c203757ea74e9f3a71da0137aeca39b240f3f748dc512cff8b25b530778225fddb79ed5bdca0059382169891ed302da2cfde36b6582c311a722c45542655c1298989dee815d1ec434ae057fc47baca679ee9206fb363f884e7baf9ee28c59083bb5661925ec3da987e421672db97cf2874b1a1096951b2f7542a2bf28f4de8acb847383354c81f14d4a2d30412c7dd6c5be592d1acdf57c30196bf69cecf35d399d448c5e008c9de492be6fb953abf34be6d7a5e33805ed42c1b6f2ef76d9a2096e6d56964569ede22efce47c3e7a40dd278939d738d672ba70799016efdd522e3d72a93957fe0c3737c5f0eb1a78b1689e38aeb0476a5e6526618ab9d94d3216b102234ad1d0e646887e922704d0fe869031fbd24298b9ecb67ce04156d16b4e4cc5af2fef45d70885ff4ec3b4f191e364f03b2c3a2d2c35b49bcefd63a986febbd7c35daa72375c06fc7e9600564d6280103b618cdbf66f0d221f82e42afc87711e1e41dc93b4f68627ca32a638a130c8cc0b27e10c50b94a9f805fa5d3a5035ead27915ebd112f2fcd09ed83d6ef43fa8a961daa6cab7ff94b8a69a215c66c34c50966ef76d437d4214df0cf090dd94aeada55e0fb1c0161e4731f20067bca0faba87c6be9d6eb4a16956736775896374f6b50ddb188c3071c80998a412ddc71ecfec25f7d15451bbd345382f6670529c89691b8e8aa86e3df971bcf8bf8e401761dafce9a7027563bf1d77a17277d117c2b7a1c2da7c4861cafd75e125a0738b761fa8d879d932731a383664480bb2e127ed588f3773e4cc7ec245e2aa34dcae648dcd1418295b4376c6deaabb7f24b493bc86e29b36712263345a2e1926e9ad8fbb04b80821310209c0b26804f0cc6e5abe453ab8b6652d92f4255051659cf9e8ad6273a447223d3be53628000a3e7c913aa556f6534f484106f49966e87e1e90cf33c6ea0598479100615498eb4fe3ac140a677c450e77303da49d845c3406410c6928a830023c8122c9b128dc7e41f413e979a5f198e0a3f8a46c142dd0aba84b7d2cfffd3f0385dac176006ec359f06cbb8dcad2eb1125a2047df300549b526961d55cd3c455298ebc7c2d6dfbca75a55b5bbdd32de482b67b11d2095ea671271e3090fd6c16a98ed529ff08190728f99d000410e0cb8479260b872be2dd84bd6d4952aae043cb3079d0f92418678968f472fa6a9f73ff146ba1cc168f46e940d9954703be6a54d3715a068239f96ab3d48046c388ff062f3dd92ce9bd175159b292bb41166a19ce433e6e97a4a0acac404546ff80df1d122fde87ebb7baa27bd1c8ccc6b30731b10c597f8ef981c4b98ce32deae7ba4fcf43112d000d31d7c9dd35a6e4b78b1a6a913eb080d8f4c8bf1d3e343cda0a428b8004116ec750cb09ffba9ca8fe698f7c26135043d67a0d72f237d4ef81e7ba200c2ddcc3bb23f05f5418d138250fe022a2a54b97bef240a07923a572e21b971b9f1428de58a6423c53f8ca7284874b061de09b357e556b8ef236ccd17f24104232e807c626e8f35ee17e5455dcc410bca89c7be9b86c36903be7e1b0d8d9b58829396f494b8a328642ab757fde5e8176b5de299d2e420e9b13b4119f658957dac4a6fa8a1db009038c5e69794693273c8375e4dfdad504b9e8ea16a00d853c5fa0ed734b36192e79b0587ea24307a5ebbcdb4dbc905b67395e7d0f4de9163b8bef2570593c793cc96185046eece18af2274801e97e57f02d0495fc0c124a7f3fbaf2944d8ab1923b32b175566a05ef88a3801e5fdb688b6060f61ddbf13f6074158d0bde5267494149dc4d7d2722e82b74a5192cb76747fab6d06ddfaf553d94c026f18fae000ea9d91153a7bf734e60dcb7f097204cba2ba5f9ea5363287fef72321e6bd126a0d8abf223fbe5050ee1c83356cb101745aeecbc514f670276252aabacd0751ad5a87598cba616026861f456a75b03b12f9dd2007ea3546104fc8887e78843af691ccbb4b17db61f082cf4b3af139136a9a603806f4a44cb1c5d480aa1d7bd5f9261f33b9506f3d8b5b630aa118ba2cf7212fcaac30e16421c119d88f1dcf3899c40dea570cda84df9bce5f5a7ba52972d1159b8488d5de310c8db5421cf00dfb1a2cfcfd702762c18b27e299a48ee376de27079b1062587280f573b7bc60a8dd45d393dbcc0e322f07ccd851bf5502710c62477b7353776e23b4ca1a5165e8f2115306dc5156ac9cfdec380b7da7466bf1bd80d4e2da1f20ece74fe26b7f7eb56b9e642a2d8bcf294a602d275f4e5eea9931080d1b5e3af350b0f950701ff1066a9c7bde4765f573518ca76435bd2c5cb4ecc1b1bbdc1ad2df7761d34f00155ed73869c83033a9f7712ed13cd65edaf3e6b53888630a1c6613b14fc79c5fc84959b2467e64c1e6577b4f9b3e46a43e3efce59e4fc7de0a950eeefafe36d05d555c4ce721aa15ca7b8c1ffb716201ef214a004f044e646f018be53e07fb56a5b9ab96fb3319f20851f944eb0240ca405999a8cd67fd497b28bc9afe164c0521ca12e4aef2c040ddb62d4eaa4e80c1171c732da487ba5d71ebedf924dde587e9ce0825b38d69416b26919834e8b236e4eac35bb2c79d76fea097ad157ce329c16a1f1cd5d53b833917aa25e834e0220735bc7aff41e94182d66ba330ea0d85c3f2fe37f6dfe08d8cbcaa9a018c1ce69370b2d7a259d93db8cebf53fcbf5e15bd16f94501fb2cb21100dfabf76b4554cbb81937d70ffe62bba8ef9450b8fae8c8e87da5d77847b45a0b8297e6bc799dd4233724775b75d4e848aa25096946975198c6567159b0270591b5545870af71e357327c54d157f1261a43159e74f69cf881ee064b66dfb055f1d0d7202f410fc0401ae49df0d865a3ce257aee087e15c36679cd611ed63bd4d68cc63c17d179fd43f9dd91dfd324619ed006ddc71db95bdb295e84b0613e3c0db94c53a0820ef9bae4a3aa3c63487278b446db51d9bf32fe16c05823ee00378ac77a46b90bc6a0a09127b8e63894f5ba0d1edca49488004d084f56cc4f1c7089a343f5f04010f7cf5546b3693257fcb07075b553f104d9a5c3b8b4f4b085d9b6baf75e7967a581aed4791ae4d64cd2fde82e8e63ebc40a36577d61059acd8c05081cbcaf0758d3621985b3f2d681a7abbb7ce857db6aa43ebfb303bfc06b4739d4528a3f2672f3068587072c35cbf9e4091727a870c4cfba8f9c44840400e89849155274d2d08fde36268eae71fc1669a3209fbc8e0a591af2616301b2bebd1f1dc1b834acbc54c04c171c28fce1d0e3c487c572e82fce598fe0ff3bf59da0eebecb783fc90ddaa6db7862d315d140c8f2f8544ff628c8a550e0d7c32f6c9a6cbc9f491b1c1919cca7e428566c6929f425c69192bf2d91b28440197827154a2308b76c5c66aca4737bacd61029c1085e82c821da772adffff508d31dab9e7e8d48a55d6889d6ef9d00767f526bae257163d07442a3290fa0caaa4f56670f647d22d0636e85f3f9c6b156bf4b461da4f7a93907ca35ca4ad19910649480633d5246bd08043e6fdb5616620ddcfc7939078dd012e855e389ec4c868334df46ccd89000836cfd3c7de9f167ab43e6bfa9d72d99ce4c5d9ab90d840d9fd563cb07980189dc185a632d903e6abcd8d69a066844262bffccfe551a16bd70cd50017385371df775e3cb8601d5e3b2562c1bb7e4045c3f6edcc18ec9ac27df41836ac3119f1327955eb769e389edd1af28d23abfe6aba8c730df8092990902fe91413fb5ba61dd620cbc708b8f1620ec9c89b41a29e57f8a16c187ced1005d384f66cec2aad668a3e970e4c3a39f4537651e1632d423f73727bcd4065e59996e52a339edeca98a800843caa1c8829187ea5dca729bfe74f7f68541021507220e67b7a6483a9e2948da2c9a9f174c7997eb7c13aec7fb10fa0918159f0fca57bd62d630f4ffec4a7a8ed6915e66676a5a81b244b4071f636e300773d467536c461173c5b1f4e949d6a430fdd293370075560a77c314e9e1b883ffa1ec4441297d431ed4dabacf665172bf04daa11eeaa69849e67c9c5ec6683ab386169e1a68b75615b300f956d0123f6ba0c4f03bd6503d99d466313ed0b69fb7d15c44ecef836de6f157819fe0558484a0ccaab531ffe06224043c80d3c592da15ff6c8e51168a3d7772e6a12549", 0x1000) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) r10 = dup3(r1, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_CLEAR_QUE(r10, 0xab05) 16:07:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xb8, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0xb8}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x8000000}) 16:07:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private1, 0x50000, 0x1, 0x0, 0xe, 0x2, 0x401}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000000c0)={0x7fff, 0x2, &(0x7f0000000000)=[0x7, 0xffff], &(0x7f0000000040)=[0x2, 0xffff, 0xfff, 0x0], &(0x7f0000000080)=[0x6, 0xffff, 0x0]}) 16:07:13 executing program 0: ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/128, &(0x7f00000000c0)=0x80) 16:07:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000100)={[], 0x49, 0x400, 0x20, 0x0, 0x7, 0x1, 0x4, [], 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x40) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000000c0)) ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000040)={0x0, 0x7, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80000, 0x0) [ 1438.370686][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x3b050000}) 16:07:13 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@int=0x63ca, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3, 0x4, 0x2, 0x6}, &(0x7f0000000040)=0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x163502) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) write$nbd(r7, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x3, 0x2, "4d4d18e05aa9da8f3451cbb3b8a22ae6edb4d3acbf6c5e4b9637be2c54bc47a164e46f8a4d577a8d85a37fc9db9d209bf6854365e7653f93d5f3df7c80bf13586c5529ec3c339c1fd451440df8f4579eaeadffc2a7fd724ef1cda4eda0edf21e677331aeee6388fd2a4901bb8eda1ca91195a0385e1b417a5ffe69f0c206c462a270"}, 0x92) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) socket$pppoe(0x18, 0x1, 0x0) [ 1438.557652][T28312] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1438.657662][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1438.887017][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1439.057012][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1439.066035][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.074376][T28312] usb 3-1: Product: syz [ 1439.078799][T28312] usb 3-1: Manufacturer: syz [ 1439.083378][T28312] usb 3-1: SerialNumber: syz [ 1439.089562][T28312] usb 3-1: config 0 descriptor?? [ 1439.167205][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.369341][T28312] usb 3-1: USB disconnect, device number 73 [ 1439.417078][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000080)) 16:07:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x7ffffffe}) 16:07:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)={r2, 0x0, 0x3f, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}) 16:07:14 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) r5 = accept4$tipc(r3, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000100)={0x2, 'veth0_macvtap\x00', {0xe77}, 0x1000}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5020100}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x44, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040044}, 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)) 16:07:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xa4, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0xa4}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x80000001]}, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 16:07:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) recvmsg$kcm(r4, &(0x7f0000000900)={&(0x7f0000000000)=@caif=@rfm, 0x80, &(0x7f0000000740)=[{&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000000600)=""/218, 0xda}, {&(0x7f0000000700)=""/45, 0x2d}], 0xa, &(0x7f0000000800)=""/203, 0xcb}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x40) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) sync_file_range(r1, 0x200, 0x5, 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x80040000}) 16:07:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x36040, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040), 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r4}}}, 0x78) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001400)={0x150, 0xffffffffffffffda, 0x6, [{{0x0, 0x1, 0x8000, 0x80, 0x1f, 0xfffffffa, {0x0, 0x7, 0x7, 0xfffffffffffffff7, 0x100, 0x56, 0x3, 0x400, 0x2, 0x81, 0x1, 0x0, 0x0, 0x0, 0x3}}, {0x3, 0x2, 0x1, 0x2, '+'}}, {{0x1, 0x0, 0x2, 0x0, 0x671, 0x2, {0x5, 0x2, 0xa626, 0x2, 0xfffffffffffffffa, 0xffffffffffffffff, 0x23f, 0x7, 0x2, 0xc896, 0x7, 0x0, r4, 0x2, 0x8000}}, {0x1, 0x9, 0x1, 0x4, '^'}}]}, 0x150) fchownat(r1, &(0x7f0000000080)='./file0\x00', r3, r4, 0x400) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:07:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xf6ffffff}) 16:07:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x440400) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x44002, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000340)={0x6, 'veth0_virt_wifi\x00', {0x9}, 0xc76}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x38}}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8966d3c0000", @ANYRES16=r2, @ANYBLOB="00022bbd7000fcdbdf2501000000080002000200000008000300050000001400018008000300e0000002050002000100000004000180"], 0x3c}}, 0x20000000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 1440.246894][ T2505] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1440.447121][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.496867][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1440.697400][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1440.877333][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1440.886484][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.906802][ T2505] usb 3-1: Product: syz [ 1440.910966][ T2505] usb 3-1: Manufacturer: syz [ 1440.915547][ T2505] usb 3-1: SerialNumber: syz [ 1440.938012][ T2505] usb 3-1: config 0 descriptor?? [ 1440.945199][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.219210][ T2505] usb 3-1: USB disconnect, device number 74 [ 1441.488288][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x1, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:07:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xfdfdffff}) 16:07:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000000200"/20, @ANYRES32=0x0, @ANYBLOB="0702960444330000"], 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback, 0x5a, r6}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r7, 0x1ff, 0x5}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r8, 0xf1, 0x80000000, 0x3}, &(0x7f0000000180)=0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x90, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x90}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7, 0x163301) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000100)={{0x0, 0x0, @reserved="72a5d6b0d581690b940465e336ee3f928e25074d3795b810bd6753a2f4eb23e2"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x22}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0x8, r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000180)={r1, 0x400}) 16:07:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xfeffff7f}) 16:07:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 16:07:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000003c0)={0x306b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r8 = dup2(r7, r6) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x34, 0x1407, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x400c000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0x9d0000, 0x400, 0x10000, r6, 0x0, &(0x7f0000000080)={0x980913, 0xab5c, [], @p_u16=&(0x7f0000000040)=0x3f}}) ioctl$mixer_OSS_GETVERSION(r12, 0x80044d76, &(0x7f0000000140)) r13 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa00, 0x4c) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r13, 0xc01064b3, &(0x7f00000000c0)) 16:07:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xfeffffff}) 16:07:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r2, 0x2}) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:17 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r5, 0x83000000) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000000)={0x11}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)) [ 1442.076812][ T2505] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 1442.437244][ T2505] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1442.517276][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1442.537489][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.566902][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.966960][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.606770][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x23, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x4}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = pidfd_getfd(r4, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x4, 0x1, 0x10000, 0x1, 0x0}) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r10}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000000c0)={r10, 0x1000, 0x1, [0x7f]}, &(0x7f0000000100)=0xa) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0xfffff800, 0x0, 0x401, r7}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xff000000}) 16:07:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x20, 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$bt_bnep(0x1f, 0x3, 0x4) write$P9_ROPEN(r5, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x10, 0x3, 0x1}, 0xffffffff}}, 0x18) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc0c0583b, &(0x7f0000000100)) 16:07:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x7c}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = semget$private(0x0, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0x0, r3}}) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f0000000000)=""/109) [ 1444.866723][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1444.875778][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.884546][T32411] sctp: [Deprecated]: syz-executor.0 (pid 32411) Use of int in maxseg socket option. [ 1444.884546][T32411] Use struct sctp_assoc_value instead 16:07:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x322, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xad}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc0c0583b, &(0x7f0000000100)) 16:07:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffdfd}) 16:07:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x10001, 0x8f29, 0x1ff, 0x2, 0xdaaa, 0x9, 0x1, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2, 0xfffffffffffffff8, 0xa215, 0x8, 0x2, 0x3, 0x2, 0x5b}, &(0x7f0000000180)={0x10001, 0x9, 0x9, 0x6, 0x4800000000000000, 0x7f, 0x62, 0x2}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x8]}, 0x8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @rose={'rose', 0x0}, 0x5, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 1444.936395][ T2505] usb 3-1: config 0 descriptor?? 16:07:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) dup2(r3, 0xffffffffffffffff) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, r6, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r6, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x600000, 0x0) read$midi(r10, &(0x7f0000000740)=""/4096, 0x1000) sendmsg$SOCK_DESTROY(r10, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x264, 0x15, 0x200, 0x70bd26, 0x25dfdbfd, {0x1d, 0x81}, [@INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "8806467431db3d2060e6e9b094292c7c3cabfdb7558ba170d564f0e0c2e4c31fa8718a68588b4d380d9311d11fc8c6205b3484f15a12a1d0f7931fad842a7b1ad2bff671d7b3263f21b314ac7b499b6937e33a013ae1a0741c0e382a79b85cf102c90895dea4db8a0e2f290ca92f74039be2e44e56f83d46"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "40bc4b787a8907b616b5bd9d96abf20c6c926fd9dcb50253149aaacbade7c4df693a43af07bcdb1d916c294b84e78c66e30275a626f308c35502eb2aefb48c1c170e204d5c317e48d017ce6516ebf8a57bcb868e10670523fdbf1631be839fd001cd543bb82b0c4fb62ba9ec14d45dc6f2c4711586cd44fc74db029bcff64c0d790baaa9acac4ffbc4dff337a110370909d58b3f2f1a215129f709c09ccb434de07890d4149a32fcad7f9d88ee72011ad75aa0209c07728f6dd7d37208e12910ffa440ba1ed873a1ecb985e21c79bccc"}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000041}, 0x4004000) 16:07:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x54, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x35, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x3fc, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xed}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb72}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85cf}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xb8, 0x3, "495c5309a8a5a409eaa2d2f7bd996943bd9c3c65bbab23a779998870e275bc8a9d86b723baa8bc154536258e03d0f29aab919f69ff05ca0fede36fad1b26d355d38b1bf00851354529fe9afbc2240c87f8d7b646baa23a9f566d3b2ea58a00f94d772a885c8545d40910df36ba83f8ed59cf1fb37df3a5af7a7260c8e5004b8e5ccffbab3b85b440a6f92cc12f1369350743cae3e012437828a541d49c80b1f9f0a528c6aeb003ddd982c5406023fadb302bcc5d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "830224e324a5ef70b7aceeced55c43a8b428d085bdf9fbc48ee19e5a301b2f81e262cd"}}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xeb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x64}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "908050f5d7a0f94182bfdfdd0fab9b6969b18881b17557aa2e"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x478f}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x3fc}}, 0x4000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 1445.016715][ T2505] usb 3-1: can't set config #0, error -71 [ 1445.029740][ T2505] usb 3-1: USB disconnect, device number 75 16:07:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) setsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000000)="d1ebc277053bcadf18342ed20ee524e3e2896c2274e4b25a9182d336131a5d63fd79afb99e76fe37ba1dbd1fcfb4cb66f5cd57e568eb0529d7b634cf578a45c7b643d7ae57ffce50429a8609336f3c39602cefdc6122fa6f24b03140b00c53db0ae884364a81be4a8916d2ce9b85e3528d325d8fc407d585d923253aacf37ccbdca7623678ee115605b928091cbdf3dc9a90175a185cfc91462408240cff98d695983b1e825de80b9d3bc0735fdbe155ea2a5873fde1ecf78aaf59d5ca08d685e888c47a908d86df96da8d16802464a348da3fa70d2d717bfb76b159c04d866852e268569644f45b215bbfa73fd266ba", 0xf0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) [ 1445.416691][ T2505] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1445.656713][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.666713][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1445.827115][ T2505] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1445.907144][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1446.086641][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1446.095709][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.116543][ T2505] usb 3-1: Product: syz [ 1446.120758][ T2505] usb 3-1: Manufacturer: syz [ 1446.125594][ T2505] usb 3-1: SerialNumber: syz [ 1446.137953][ T2505] usb 3-1: config 0 descriptor?? [ 1446.418872][ T2505] usb 3-1: USB disconnect, device number 76 [ 1446.697038][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="050f1700024a92f1a0ac9bdc672364935312480ab6e1484263bca53d0cc55d0ac9ac4e7c6364e37f9d3f3d790f0a39778b30"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffff6}) 16:07:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4e8e, 0x20000) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000140)) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000080)) 16:07:21 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="000034460348cc9d"]) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 16:07:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x7c}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCEXCL(r7, 0x540c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f0000000280)={0xffffffad, 0x1, 'client0\x00', 0xffffffff80000004, "9d2701fe9732bc4c", "c2ee76ee5172b81e51158bfe3d44e49a2ce21ad58432451d3c593089087493a8", 0x3f, 0x7fffffff}) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x7}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) 16:07:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffe}) [ 1447.006644][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) 16:07:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) dup2(r6, r5) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000100)) r7 = dup3(r4, r3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r10 = dup2(r9, r8) io_uring_setup(0x682d, &(0x7f0000000080)={0x0, 0xc5c2, 0xc, 0x1, 0x3af}) setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x80000000fffe) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000040)=0xffff) 16:07:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x428080) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) recvfrom$inet(r4, &(0x7f0000000100)=""/189, 0xbd, 0x20, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x21, 0x6, 0x4004, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r6, r5) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r6}) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000040)={0x64, 0x2, 0x4, 0x4, 0xd8eb, 0x81}) 16:07:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x2}) 16:07:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETFMTS(r5, 0x8004500b, &(0x7f0000000080)=0x9) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) r6 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) copy_file_range(r2, &(0x7f0000000000)=0x5, r6, 0x0, 0x0, 0x0) [ 1447.417629][T28312] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1447.676441][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1447.726953][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.896895][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1448.066534][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1448.075608][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.083961][T28312] usb 3-1: Product: syz [ 1448.088236][T28312] usb 3-1: Manufacturer: syz [ 1448.092871][T28312] usb 3-1: SerialNumber: syz [ 1448.104171][T28312] usb 3-1: config 0 descriptor?? [ 1448.389670][T28312] usb 3-1: USB disconnect, device number 77 [ 1448.766642][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.774779][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x20840) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x24000, 0x0) dup2(r2, r1) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) 16:07:23 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8b47a820081e9ed1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)=""/210, &(0x7f0000000180)=0xd2) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 16:07:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x3}) 16:07:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x7c}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x7c}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) sync() socketpair(0x1, 0x5, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/49}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4}) 16:07:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x5}) 16:07:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r6, 0x7, 0x2, 0x6}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x87, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e22, 0x0, 'sh\x00', 0x10, 0x40008, 0x13}, 0x2c) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x3, 0xc22, 0x80000001}) 16:07:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x6, 0x2, 0x2, 0x1, 0x2, 0x9}, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:07:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}) 16:07:24 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x11, 0x3}, {0x95, 0x1}, 0x4, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 16:07:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7}) 16:07:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) [ 1449.296668][T32441] usb 3-1: new high-speed USB device number 78 using dummy_hcd 16:07:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x2, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:24 executing program 0: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400201) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000000)) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) dup2(r8, r7) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KDSIGACCEPT(r11, 0x4b4e, 0x20) [ 1449.551501][T32441] usb 3-1: Using ep0 maxpacket: 8 [ 1449.786991][T32441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1449.817342][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.956888][T32441] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1449.965916][T32441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.974338][T32441] usb 3-1: Product: syz [ 1449.978755][T32441] usb 3-1: Manufacturer: syz [ 1449.983338][T32441] usb 3-1: SerialNumber: syz [ 1449.989301][T32441] usb 3-1: config 0 descriptor?? [ 1450.046543][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.278489][T32441] usb 3-1: USB disconnect, device number 78 16:07:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="050f177e05744a0000"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8}) 16:07:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x7c}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:07:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x234882, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:07:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8001, 0x202) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x300}) [ 1450.847085][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 16:07:26 executing program 0: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = dup2(r1, r0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) bind$rose(r3, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x7fffffff, 0x1, 0x3, 0xb, 0x4, 0x7}, &(0x7f0000000040)=0x20) 16:07:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x480}) [ 1451.176318][T28312] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1451.446307][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1451.577207][T28312] usb 3-1: unable to get BOS descriptor set [ 1451.656366][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1451.816834][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1451.825943][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.834348][T28312] usb 3-1: Product: syz [ 1451.838624][T28312] usb 3-1: Manufacturer: syz [ 1451.843258][T28312] usb 3-1: SerialNumber: syz [ 1451.850855][T28312] usb 3-1: config 0 descriptor?? [ 1451.886530][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.128619][T28312] usb 3-1: USB disconnect, device number 79 16:07:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001bf) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x40000000000000, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x500}) 16:07:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x68}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x300}) 16:07:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x53b}) 16:07:27 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x1b0001}, [@ldst={0xffffffbd, 0x2, 0x4f04}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x481, &(0x7f00000001c0)=""/195}, 0x48) r2 = dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x28, r4, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x2a4, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x11c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x221ffe7b897eb33a}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x10}, 0x4840) io_uring_setup(0x818, &(0x7f0000000140)={0x0, 0x1d45, 0x8, 0x3, 0xa8, 0x0, r2}) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000000c0)) lseek(r5, 0x8f18, 0x4) 16:07:27 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:27 executing program 0: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) 16:07:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x600}) 16:07:27 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x1}) [ 1452.926889][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.076356][ T2520] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1453.091275][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.326273][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1453.526186][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1453.687549][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1453.696606][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.704566][ T2520] usb 3-1: Product: syz [ 1453.709175][ T2520] usb 3-1: Manufacturer: syz [ 1453.713771][ T2520] usb 3-1: SerialNumber: syz [ 1453.721860][ T2520] usb 3-1: config 0 descriptor?? [ 1453.966286][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.011639][ T2520] usb 3-1: USB disconnect, device number 80 16:07:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000080)={r5, r6/1000+60000}, 0x10) 16:07:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x6, 0xfffffff7, 0x1, 0x100, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1ff) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000080)={{0x7, 0x80}, 'port0\x00', 0x0, 0x1010, 0x6, 0x2, 0x7ff, 0x8, 0x6, 0x0, 0x3, 0x49}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) connect$nfc_llcp(r8, &(0x7f0000000140)={0x27, 0x0, 0xffff0c5e, 0x7, 0x7, 0xfa, "73bf79d04f9fe39086db3d838ac33898d1ac6ea68ccc4ea1b87dc3003c04ab5a7d0195031068bb72c4d2818f8c76848762b5de12a087b8c373e0a221eca30e", 0x29}, 0x60) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000000040)={0x7, 0x1}) 16:07:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x700}) 16:07:29 executing program 5: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x68}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x3b05}) 16:07:29 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:29 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8004}) [ 1454.876388][T32441] usb 3-1: new high-speed USB device number 81 using dummy_hcd 16:07:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xff00}) 16:07:30 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) [ 1455.006381][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.126201][T32441] usb 3-1: Using ep0 maxpacket: 8 [ 1455.351506][T32441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1455.546945][T32441] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1455.561257][T32441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.570964][T32441] usb 3-1: Product: syz [ 1455.575202][T32441] usb 3-1: Manufacturer: syz [ 1455.584556][T32441] usb 3-1: SerialNumber: syz [ 1455.595436][T32441] usb 3-1: config 0 descriptor?? [ 1455.878790][T32441] usb 3-1: USB disconnect, device number 81 [ 1456.046302][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.126359][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x54}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 16:07:31 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = io_uring_setup(0x171e, &(0x7f0000000040)) r2 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x5, 0x2a00) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="03020000e1ffff0200012d9f6c616e000000001800028006000100000000000c009274b542cd43a7", @ANYRES32=r5, @ANYBLOB="08000a0079f5097dad4c8eb226db9c1275dc3308383eb488dcc5de1041eaca03059f348135726db59f2d5814d4b8b10434fc3bd8424500f9b3969190a098cd4e2d7c52b4c31eba1de410963127c3a4bb93769c93e26913d085", @ANYRES32=r5, @ANYBLOB], 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r5, 0x2f, 0x81, 0x7, 0x7, 0x20, @private2, @private1={0xfc, 0x1, [], 0x1}, 0x1, 0x20, 0xec3, 0x34b}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000500)={'wg2\x00', r6}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r9, r8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0406618, &(0x7f0000000600)={{0x1, 0x0, @identifier="1a7176bb4ebad5741205b04602e57ea5"}}) r10 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x80280) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x30) syz_io_uring_complete(r7) r11 = syz_io_uring_complete(r7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000000)="6c0963b7ebae54aab96010c17b5a7d678dbca47dc34a62f2744f057321102141af069bd087a81cd481dc29d96397725a436f14e6aeb5f0ca6a23a0fee664f0959a876e2bed2bb35562b29b8d9073b6d9a6bedec39ce3e8b69706de22aa6ee3bebafc389ca3ffa0d6d674c66abcd639f2961bd34a251786256751c0f63864a75fbb26ad23aa61f57e533a599475719a1b2376e15e2fea", &(0x7f00000000c0)=""/237, &(0x7f0000000200)="b45c06e01ea90e45a0a91748dd7656bf362b71f03b0ef19f7b3fc3cdb89285bceb94d9c161af8eef9d0d1fd698991764944a7439a294936672ec800dc339e3196022ea8e927461e9d26293ae6906318443f0c61830f6478b59e3e3348e64def55861a40b4efdde956a5b5983c595e5ab19086505a5faf86d73e897fcc7f1db45c3639a221e402dc267849bbaf3925b2e71a5497cef88cf9dc83b58820d872685da9330424774a3d751f6d6d658e80f509fe4d47bf422f4bf0ad04e860e74", &(0x7f00000002c0)="2a1e2dd53b4cda6f5667dcfaf307abc68922a55fadbf7d05d4a74bb529b02ebc7ccf29278b1b13682a5df2a62378f14926de93f340c6f2287bb519a8facc5120416a882f157bee716e57ad88848f5c58419cffe74de1e27ab963b5351cd4414012ebeeeccafbf8d46ff630be6694072073bf8aca0e5f8648405d6167d55f0163a255bb2bba283cb836923c493b095fd8c13d9798efa024ca3210db0f907b4f797116e163a4b5c15ba982c7c5143f1b78e324dda420a94d3bf628a7257e13a9ab550c115f22fc8d708451536e8bc35dd450d91ea981f60cd508", 0xfffffbff, r11}, 0x38) 16:07:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:31 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x2000000}) [ 1456.523675][T32752] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1456.628437][T32752] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 16:07:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = dup2(r2, r1) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000009040)=@delneigh={0x60, 0x1d, 0x20, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x80, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_IFINDEX={0x8}, @NDA_SRC_VNI={0x8, 0xb, 0x7}, @NDA_LLADDR={0xa, 0x2, @link_local}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_PROBES={0x8, 0x4, 0x6}, @NDA_DST_IPV4={0x8, 0x1, @local}]}, 0x60}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008e40)=[{{&(0x7f0000000140)=@ll={0x11, 0x9, r5, 0x1, 0x80, 0x6, @dev={[], 0x40}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)="d42441dcd427b4699cddf898a1df20c58edfb58bbdfc98349727cd5802e44b81c51090e0d0425902ac9752bcb9dd96850e51937aacfea2b3fc7c88f9d9273db39e56705cd2a338a7d225590cbb0f31ac6953f9ce89fd", 0x56}], 0x1, &(0x7f0000000400)=[{0xc8, 0x111, 0x9, "3932632ae36281117207fe053de6e09e4afa44f6c219dd34174eeb724e13fdc167a4d4a425ad36cea51575c7666b7cb1ce4369f674931728645a10a50d157b1d9881d321cff1b24f6fb5aa4cde27ee835a18570875adecbcac08c4374159e10359d20e61bb18fd72132db4383ed57eeed9178ace2ec601e0dbacfdc2904236ccca190529c93a766210004eb064813c48f873dc6147942260f5ed5e8f58b0efbc247cee2a90d92a44060070ea98c91ea4d37b"}], 0xc8}}, {{&(0x7f0000000500)=@ll={0x11, 0x5, r8, 0x1, 0x6, 0x6, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)="378c51b1a92e49e7f10771f00a008ea04d06d4e472f7706940f81fcef97e24fa1f7116e04c086c", 0x27}, {&(0x7f0000000580)="87efda4d7a0b5dbe7cb1fadc184053553509dbb325bd34dc7e78ed37fce77b20580ad444fe329a652effeb37cc8b7a1106ddfa52dd5915b4de4ac3d0ba302a66de2ddf27ddf1f2bf3b608a5559", 0x4d}, {&(0x7f0000000600)="b4c0c8d8912703bf130ac1957cda0c323d95fda351c9ccd7e197542e8e459af703062e34c3c0d6dd8e447271f6f4511151808292adf0f896ba2a58eff0dd54cf406011d7ac98024094197c9c87da098f526960cb2eff99f8ffec142772f7c2eec673b9248f2a3c6ad412588e41b881309fe954a5a6416da57bada0e90bd8a29a5b0d64594629834dbdc012a21c3948645c0687635e165fbb377e401fc4a1bffc0c3053ee22600b907e85658add9a0eefe44619aa664f6dcf6067f46eb2a34350c4754580c9", 0xc5}, {&(0x7f0000000700)="cac2d774c08ea21dc0a16c5f6899c5ab9a5b59dfbba138848c08495a8190cf2506fa940452df34eb3119ed36d8efa96592a8fc51", 0x34}], 0x4, &(0x7f0000000780)=[{0x20, 0x0, 0x0, "a17e2ebe5793777ebd8d"}, {0x98, 0x10e, 0x8, "a452a695883461284df213bcce11aaf8cdecd1f68c912bbe058362869e3bf7bffe297024f7d846c94db7155465c0982e999c85dc753283266c1bedfd602d28fc9eee01edcf116eec2da5e7dbc1bacfc1a3339a0a548fd6ae28b8d01eeae03c2364d24ffa455659bb5a34003402eb68c355a548f039c3767c9084e133c098cc32d65f"}, {0x78, 0x29, 0x1, "a5af66bf885f6ef74dcee2984f08da8c3a3f12c57c55c2bf8ddf6e6e73683a933098ab36653c983f70b7e254cd8eff4d37dd627eebfea4d0f186a026175d448aa3c7aca9aa759608d8fbce97a30979f2056d92d754b92b971230f860c045deb16817b8583b42a8"}, {0x1010, 0x88, 0x2, "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"}, {0x1010, 0x6, 0x401, "69e4498934733b0fd88725ee262b6183ccb467486ad2ab1a5635e1ffeba47c66a8152b563dc7c298d75e671c18199387efb03f49f45b7ed024427e80b9b7f054090654ad587337b3c7844bb6d2a4b2cb129fcae0309311df1ca35c9f77cb48b2ecd4dc6f2b1ce28726ebc69520f2453f45ca2ee6bc6d7345d30638291ae995da912b08eceb8d98bce0f864dc4a3db06040e7b0c4abdb06b66af1dbbac1ad5ac110f854f1b627fc01e3acaf60e649516f33f7b76413a299b95763f2a2c3691f791459a7a445b8845b9179c2560cdd3d2c8d44c2920f840a6bc6d1a30c1eb4cc20e206cb98aec54860b63ad6aae1366d924c33dd1049e3328b13a39132504f8c519accffbf823356abb121f65620b3dd835e0f45ba57f072daea7452174aa68af13bec347071176eb13a12441a54b46c2c3e5b21d5ed7d46ed15a2c9e35e1e1c6627c312fb81f06bb8ccc9ab9a1d95d79a530f1a99e4a296171c450b7d8cb17745076b74e5a8e058436d3e7050ed129246bb34be737f9749ff49eeeffff4f2c568c4f2563d389233195c257eb283c8113238b8b0163a8c89c340f1307dabe75c0bb6762f618b72d15baea7a922c213b81c9d3817d52ee39e069096b5ef00d1fa1fa427ae5f7e8b205c39a23061c3c4f0daab0347d8dafd1e482045ddcb26ac1b523c6117897af3781c73a22154d9f010cf1e27c572886a2702dd00fe0f308f75ed067c3577c96d89f021c96bde550248995a459cc2279a98189eee3e8d9bed20896b5bdb276e65fe84bd5ef76c50b52d7b7ca881b937bf1a20a3c119cef9d1084ff4ac36d2f0302ec2da4c67c817286c92f345567c971e5ecd7da346f0fa00a5407f9c984f0d1fb26e9f413432a8ed3444fa6fb4dfb753faaf794e3d5bf469783a5be78bfb3a4130205db00a08188879b518033b4b98b662575cdba6386a741d1b388d65098a714050478ba703225eb36faa81565ff49c52eefe0a4721ee0bc5a4f179a842f2116bc5f2572cd6e1461040e9d30d6bcdf2d0f46272cc4a4a589f8106b3f0326673b9ff4184212808d60c5c3aec26c26581a9e30d4f5de20234b220c873197b9a856b0bae8c61e55881ffa9e5bee0491a6327e054136b2f47757b5df201eae27aacf62a9160444a6ad919adcd2eedeaab78d1c555616a15211cd5108248402f7e801fd15a796bfb0567635583d2bc7fb623bc41666b7fb817a37a065ff204d8b0edca0fef73f966a4d8840450c456ef3f7ffa9ce2f1587ed933df6f302edf25f6260535c1bd6991106196b6967dbc7879812f46c22694692634efa1792bffbd3b046f2f210775c3cd410f702a53274aac20895c96530933b49aa3bbda1f66ff404ddfbf2c6f5b3533805181d9afed27da3b10b5b3e15621c9a7aed533401046fd010b2d19e12450135c8ad83ab7c92abfef36f9f07102cd0f65e1c3d2694db13437dc578bb7721ff5ba504f59df48475f398cfca1647c61b753a1a3d0931e5fd43abf608384752ef4374f26603adac5df99f4166f6e2c6af7862b550fe4b768de2494456776b5440632ecf43748bbc99aa582fdd259889c8a7a546ad1b84a85ec3f14dd0bd149d4ba603cd44cfcb52c73490568fe2d009554c561ef5f2becc4553e03b7fada5da93306af5c18b1e717e51146a8f6db8c636219b08a62cc50ada9a74309922aefac9292c7e2e6cfa797dc99d1ecd268f86fc473828e0cc2a2346a5f8e289dca85b221e8de9d2a8fff1e533bfc590d6aca4f9eacbaad6964ab27690a5c6d66bee96fa9435cc7d96e8ba9fd5f596808bf198fc43077c365a0c1549cff407e859775242bc3d48c4429c9424d8626db62d3d9602abb5e41c901213b59cafe7e54cd3b5ea7c7938b76ddfeec51a52e21d24fcfbf8793b956da506d40399998369a9197354103e2654235a71de98708a295c558b878b852b56750c4564f06b03189333fe01e89233a29b20264e8132068f17701904a36bd2fd637de2fd8697397c842786b6e6d722f1d4d16983d2703581965f07fc5091632a559e1669804e3a12162d691cac66e335d1e4c06d165e9aa7412e2074f0c9926d5eba75784a6a9c15fcccf9d484877d25263b2e2b364fb7119f6495ee500580ecc0ab5f6455870be1777fbdab03462502b26dd24a898501f94fb2810a499e4d5f2d92cc6ae6c8f7b6f7e83e7d1d3a0a2168cea6e74255bd6d18ecb29becf7eafabab2809902d46534abd080ce17c3d38f1b629fc766980b260abee0405569dc6cb8723fced5dd24803f79fe31c126cf30ea47b2c2f709389a89c5fa79a23c6b5cf8fe6dc55c6de945907e44e72c908ac94b098238fdb0351960695f633c02df4cd4711d69fa774a3ed66a6f5c8995d1e69b0fcbec8cd7fe305f5ad6ff19ac38114d5b5f4bdd16d6bcfcfaaf6b1b2fd4e7a60227b0c1b01b5fbaaff600b1f313feca7a43946e542f47cbee79d688ce1e5238a181aa08a0ea8ee60622362aa38d7fe3f280720b61cf64b779f7d65955c70c0b4229a078b00679aa3da5ef461bfc51d7bd386cbeca1e34984a7baa26c7bcaa49a7008607f5962e368ee475a5361ad64b9c055cd034df8a15740ec119c6da83faaca7c448d8654bd140da7b99c29a79c9cdd9306d3d7e6714a1a9847621e76355731205c47c5db071d86641393d5d193cff8172b6fee19211dc18a6a6faf0ade98d234637ba1416832680e0ad10bd1aeb6ebf1ee8e59571fd1643dbec74ba4d2cc33627bcdc947f3bd262d8981f0376fd6f13658610419759d2aef73d40005b7bbf39f7cc5730230288722af0467659f3eb67182bc4d8be83a8b1dea2f595af1ee0b8d4d664e346b7d4f31d326bcb71d01baf1831421d7eb67cbd091d5d9562415d7652f230f355c3cf765867cc801c9a11bbb9feb2c22c97034a52462951ce46a82a5ebb59616f52b8cf6c73b9251b64cf2f5ae0a40b82eb3053690d226b411179b73bac97466efebb626ed6aab39b3f4a00fd4b54b9dcbb8efbedb1bec54cd7ac1862b56f26ce1995abf312b38114f611edf8debc235598b045838b435ec5d7e3e6c3c8646c0a7ec467f5ae81f5bb607a16261a9cfebfe713f4a8a4809fc88d7b2625b6e41ba030dd56a935b8e172bf6c921c04e16cd3e92a0423ff575fedceb0220a6eceaacb6d444c512398acf959e9849655a5acd0a1476f9ebb7b1fc153862464d850ee3917e31bfdd172427a203c4aa35c1093b9b127217cb3145256719c082bf03f727cc99d6bd6b5457ee2bda0a94379c8edf040632a91784cb4262ec1d27d6a1a027cdc9d140c556a181c388a3c88a2ea912d5dcc8f583a821b5dbce67927fbdb32f1990d668e0c9a924f3391fbc2ad6c0c0de8e681bbc4ada6ceed58ea89ad51ce641a617e41f9ae00ad0a1008d73cd393bf08854fc2bacf6ddabc0697f5fe64da69e47d25eab99629aa61ed30b6f8a7fe817e8d9581cc7905e068084e6efe8fd8c000b18f8e6b4efa699666ab8363254b2041da51dcdb2d2c36f5d16256885291deac5f7b4d615c609ced4022e9094050bca775fae34c244696767d2fbc5079bc2ff732381caf6895fb2012a51d4a7dd2db5f6bbef8629bbf6f4d5664078ff08fcf9c13ffc99bb68b4fc585018e4c31d6dc4f78849926b590eaa1f79865aab9fbe078b29e2ad7fea6a81195ea0e4242c896258e6bb701eb09370cf16f02ed8631590240d9c1b3f5f3eb795bfeba7a1949e96e561683dba1fce3acb9f4ee03a0c1cfcd5f3ef97844ca40e09902e93c7f7e656764c3c46b4b7c4745246eb420ae42f677d7f1b38befead299db5188aa09f7c59a37e6331d14e73b142918dd5e4f06ed3ce0fc7c2c8014352a68f589c3b86c945f0caf414d309bc205aed960f289e364b5eddd64905c322248d3ca4102bbb83a8ef1d2f680c0124870c413fb4d755acf810f6b996541dfa7109c934a594f29a333ebdaec9d3f31136656485bf1561e03b8b614f4a1541e7ecbdf7268e8ecc478f99047ef10eba44a0ff79f605ce6fd34108bc9b831c3beead4268dfe1b478a9d37d8514995e7b00a3e45fab26f208be079317c4d29446539635794bb13714fe27033bd8cd6065c75877187eee9fc961376da2cdbc94a94ba94460d6eb6e1911232f7e0b7362c7ae902c3067cf34efc5af27b61192e7367a4d171ad01aec1cb90b307202c35973d97b903035d53dd0b80d300c5f2cdaf642acd1febc6495a4cffd3be9cb119d34f019e14f2a2db921c7705cd4e98ef4ddd95d20e7606449638fbe9f5b088340e26fe28e0d9c8b5ed159cb7b4ec9c9caa6a7425b18b1c934bf6d95d168138127b2247af5f0b91da220f3a64c37a362b87a8c78a11e9ab814c865fee0a82e011cd8b04503e35fabb8acb70d874ddb94b7178819a22d0a8a0ad9394aa1b6f15ec785a256803e2de67c77771cf6ff4f0b23bd2e02cd3534520320bdb5c3829eed8e8b3b29fc75f24bba340dc067ffd59436156220a890fc410b0c8d59c0b7353916a2536a22caba818a2d209d4c112c8b5dcd48c7efcc148bfcbe511d96e32730437ba64a630848a97d01addd19cc8d4123972b6f3b7bd7d66adc679d6f98491a4ba9300e4b1fdef671b1a0a4f12a814f5d4143f9aa0fe3f125a0783dbc991a9e45b9522ca30c2a6a4878cb0c3dbb93c681ed0c0d98a6973c2ada2bfd49de7f9b173d58e9d3e9ed95baa3923ba4982bdb836b05ca0a4d8cf4a36c66e370404b766b749ae765372ec2564a13c3dbb7f134c53efd3e82a7f38b663c55a72ab6b6e795db9f955ae2e2e2dfb7d14a415b4d467cc2f7ab20b4e3c1d917abb6d9a4c823ff35f4946653f54ab3e45c481612cdb32f7677f8202304801702c4a7c4e6f0e44e7ab5619a9e95cbb1de4e96155c3a5174054f96d202ab6ff933009e2260aa8a075e712d279af20793bbc6e4355ab6bc769612dbc3afba80be7b29b019f29aeea7eaefa388ba6976a0cc14d4403c55ddc39752746e210b4d0f82d4d022fd9ee4160cd26f2a11de18e0ea4f9ff4cd2b02d4c0076946742716870183fb7e407eec3a5b699c3dcd7cd50ce3e75c09a90b5a915aea29e8904d823a89a0ce246faac8107384e71a347b45166bdcc3b859cf405345d2bbcfc59b7726e508b31fe43b321635218c4b1e32525dbf07d1f5f480808e3d1efaad0bab16a24c4ca3b355dd74f9a03dec9cd9d286e2ccbdf7ed7c07819d8bad95b2010b091219e23cf04514ea8cdfbb7adc80cebc2dcf0f4bf49f7aa8fcd694588fa429a0a4eb29ef4d07ba01d7175bd0d400e828e77150f79d716cce4835603e625cedf62851708967d3484447b1bf0f51b6fa74b5cb3b91afef86d003090b973485fc75832d25d48b75756b801701753f29a3957b2f1f20e14e88fcb25fd4c13b3e9ddad63108e6831cfd6f7e7b0a6b728f1da41834df9dc80c82a28366caa51815a4e6b1738056f452c35704c2683549c786bf34db2d91f9a6bf080a536c2ef6fe26a1e58ea9985cd3f815faa57175c8f92fe4eff2f1466eb2abbd1f2242b932e35b5d2c89bc51b0758f98bee627f2e39aa165b93588f13cde3160dffe6b473a28ce76f248b02d3839f272f5387312cde0c4625326ddbef4e279d928891e3d22d00b35f883763a02ab8710839b6bee3a7287095776366b4b9a4d36c4cec37b84b7c2c13f9327299b66956b033dc9c69257a6a0da8499879b348777bbbfaae0325537127779730077a0d3d54bb96ba535ca50ae54d1c43b30c5c7ea71d0add477ea999cc97ccd41818bd98f5a238cfc5c2e4631959c163d4039d873069057"}, {0x1010, 0x1f, 0xffff7fff, "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"}], 0x3160}}, {{&(0x7f0000003900)=@rc={0x1f, @none, 0x40}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000003980)="88cc8823a4b23dca0f101b1da10a57a950859e358844bbb92daff4a49fc084061cdfdacc629ccd8130ee256645c562dbc11b34d5cfdeade1701c7970a1111881048fef0a34e458aa", 0x48}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="313927a3a629beca431b71c6f8e486ccda7ad8f98d0b64df16f997c1c5260968287f6506d5858b639ef1af28f9ee58e9e1c1d408fcd70fec7bab86e697c46b03e237aef11949e081bdb1e465fe7464eb0654f27afcb699160f386b55d08b6e406187b31e00369c4bd83920d08560926800a3ba6b9a0de2cd1cb02aefddb7a510ae055aad077e40fbb553b3", 0x8b}, {&(0x7f0000004ac0)="7be49887cd0565cf807682a37bde4377ce4d778b396dc50856da2d0bb8edd6e0a95fa9d841a7a91cb250269a4adc09b0d52c6feb16f2e8cb151d24c8fb1089e93ac232beb442d54f5fa992a36868dce6dc2b61", 0x53}, {&(0x7f0000004b40)="1a5672a84d7d4b280e0eec3ebfeb3e5ca5f125bfc27096c686302a93e0d550eec43d2bef1365dbb2d012a5e18f59eb323010574a2f1e7d69eeadd696c0d8a4391571acf215efbb1e5339047912de1f664889650ecff84b17e3927e68ab433ce3ae", 0x61}, {&(0x7f0000004bc0)="31f3af33d301da6500da2be03723930e18dad4c792ca56c709e873766eb647b7ec3512982257c6c066cde4aa66cbeddc020ea15a820504853d5eb43cebff08d937560321bc356a451c59b3d1ecce78fb1c411d", 0x53}, {&(0x7f0000004c40)="04ea52e22d962acbf4a7912c16799022741377dc79ae72708bc32da76a84fe173173a55eb2f8c637c9deede0bd4eb8518d82c805740fce7868f4696572eb5685fa0f097d12e09c2ef2e06336a38fe0968f13d14b948744156e73a9e59d26b3798093d6e350d7bb22f7195e128c4b46b93b350895377ad280132a3b3b7dc6c001", 0x80}, {&(0x7f0000004cc0)="9da062f5875df64aafa7da17f7bd4d9a0430a30b4a1d4d7be9b19228074030c974144b392d893c7070c1d622686619fbaf6bc12fc135684b3b61e965e98c0b", 0x3f}, {&(0x7f0000004d00)="d209f6edd6298aa0ccac18973042e1e20081d3965eb183f7d8be2bbfee40ccd3b930f22f8bcdb2369a48dbeee5471167b113fbec8484be3d9ae627394c7ccb4bcc1bcc5035ad01a71c3de56c0a3e455d294dc3e104e0fc81e605ff62d69a2afa79e50fbb64fd4e78efe4907f311760c94d05a905e58e18cf9a055d623b87", 0x7e}], 0x9, &(0x7f0000004e40)}}, {{&(0x7f0000004e80)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004f00)="d68378b01da57483df15e707afe3069e0ab85a8f9bf09c7f62d274065dd8296b178bfaf36d731db4a8ef96fc1be6aa201f882046e79d37f3374b07b0fac42c13f4df76b15530ef9ab21783c0f4231f05a4664afa7ef26bcbc711c0a01445ff1b07d1ba3c5eec4cad063748074cfb47ee4c9d30fe5ab048ce26ed32fb0bcb1c648a5baee260411df5a7f38e7a82af5709e61bf8722ec5ab", 0x97}, {&(0x7f0000004fc0)="4a11c3a5d2cd5f321b429501fe8319c91a2dc7439a2883f515e9d54e1e7734f1119bc08d3a27a8ab83f0aedb690f81c839e794ac75f3b2bbcbe0957bcd3af394a43eccc0c9a37fd56145d2ebbd729fa8faf5e815bc90cb9cb54d0e823c3c91398bd06fa27e953af49f4a060b905f65e72e8f43bcbc74c56dad43a5c536a09a59a6097cc25ae317b92aca1b5f1e44e9e6d08b37d07e881e0f5231bc4b60fd71f7a8e7", 0xa2}], 0x2, &(0x7f00000050c0)=[{0xb8, 0x1e0, 0x6, "3694253e42f7194f07f46a9a2caa6069f29c5069edc43a21a71be36cde8cdc34784b5f39527d02428203dd26c76fb01285eb844bedad33f4600ab905ec51353f578bcc9c810b8637d0495c398a2742907c4094fffecb5252f36f46e2ab6c49ccd2716f45f0eb8294e03f49934424d61f3e9a59d91d56fa28cb2c62a57ab479dd8505f3b04d74517ec4ef57d5b33d9e76f32c5131cc53cffebb009576390553755db96f"}, {0x90, 0x114, 0x6, "b0b03a9207fa792c20b309bc1f4ae0070f6c9b3cb89106822513fb4efa01d1eeba7125a9a53222805fa66c525d85dd919e39857f5c6cbcd9cb600b69e8de516c15fb36a2da79cd0bfc0549c525d16211bd660ccd24254a766273f63ca1a52d9e85994a18b9733b254aa7fd55a5ff22f4bc46510671fe22ddf321124a"}, {0x60, 0x101, 0x0, "99e8eda32366460e574e4a7823cf529da8f82074ff997c9ea6662ef13ee32041ffa957d6edc28485a534fc4708a6c09fe097520f77179ce8cb35197f78a68df7387ddbcf8be7c4437f86680cc146"}, {0x70, 0x1, 0x2, "15bbfa7aade73fc7f701d6cdd572cd256b64224199f37cdd1675d0895fc8927c9a5474e1d239c367b9197df6e0c40c6686ff580a3ceb8bc7e04043e4c7f563f7be47044c39593f6ab9c07142acbd9dcf50ecf3e399c7c6bf2b6636f5"}, {0x108, 0x0, 0x0, "fc14b7ceb476c7fab37b07b9237e72df6cb258db6ca8c85a60c6015bc4719c2c8a0d7805a62fb2b16612dae22a5f81b954cde22fc66a5738bdb84dbed7a56f4b5ae5f3682bf291d33243c0978e46b04f9eebf6b7d736979c3852bddebd3456e7df4672df48b2c6ca9ad4152142dcfa543080db3990079ec1701a6de5ef97d04cb0f56afac088b3357b56a4791c438178b8ca238f39ba81b9f5535675560472ec58aef43f0ec2d0fe36a30f8a9c6c47c6162ef2c6ffc84a3207609a10b6e7a4b74098bece3009e5176b0b34db486cc6e327c22445fb9958c78a25e8e286c499b1e35a4285f0ac6da68941aaddd5434df8fc87"}, {0x1010, 0xff, 0x101, "194415651a96bde766cb6b1660924ccfdfb29b35068db282d396f1302cb7f4b6856c5998d20ce529c7123a67d66df700292e330d328c01f52ab48355cd4c08d405b3dbd52c889c18c8dd164e5787435702db0733b0547395da70249e59bcce3120291ca9e8fc019c5b69ff490f23eb8a597b3255a9e5d585536bf7395aaf6c5a966d8f55cb8236e6ad9de464d6b336f509cf6f8de98c0d0b9be7a3e2289ec96e7075c78819bc78265da41f3c61aec3a07d96bcab4c9c372f36d097b242b5f0ca5e85aa3670f26f569e38f58ce54044b22fac5d00389e6682185c2f08f3ff1062ec3e89b5ba5dc3d769e4ae4e696769eed15af8ef73a44b35dc2464de9ebf98cfbdfadf3c4ec692bf4b853ce58566a06884b3389243300c8d70c693fe92fbe6c0b0b1ec5f9dbfa73079b45afe96b2b64cc0c157e460b34d290d8f089e5f94b5fb4d63877277eb4c7237d77121241d38fbb89e7ba29458efd20ea5375525c8ad8649fef0bf0265cb3b8f8deb2c577c3a40108ddc758555a5caf7bc2f00a5d39588b7e388aa5b50158837ba7ed21c850eed13eb3b718491ec8e1f6a563122ad59a54063b463f6147e9edecd2a647ab7e479bd0e61bd3ff0f30fc396f6dc1a1fe31a875cdc2e8a944efef9d1a4add48492ea1e8e06857001fa0d170e526271d4d715ffdfa2c8fbf92619b794b2d3810f4392daa509ad45f31744905f3705c3bf6cdcdb2909ed2f81671c3413c773693a2ce096d428d2024d8eddf153e5d6f63c4d4520c54bf760733af1a4dcd1c8d9db68ada3d77411a49859fff703da43e11c7750fea41b9a6a515fbacf97d1b27c34d802f44aea5604606afc3c4f376b5e6a61523fcd049639513f559e7abc98e771978c39e534f74cb4e89fd281be17e34b33bfac6926af816a7e6ddc3123066e9dd4beb6eaf0bb375c45403dba104b1e245914a1efc067fa20aab46b36b9adb866055b80489764b76aaa590e036c832048e805a3d9b849ba408d4f79c2e0060006aa3c95bab286146019a269f10aff5d40df2958aee4d107a7e8a7abfb722816a7cae1e46e6d8b550804c2005b77da724a7eb307a12d226abd1a75e8b09b99b38760e97297d4558966b09deccbc5092959058b65400b99c572a42c16e7e0cb163aef7df27ec68496c6f6534dd3e5c4c8ea3d54ec2d8d2f6e6770c3e4a55143aa4a0b49abf6938f3eb5863cdf34757072150495fcd386391c971fb6817835bdd1fed3e605775f48c645deb01c31784e93ce31483e2544d1b7f4e461532d7f54ca9a98f381044d8662ce938cfce5d0839a239921223e5d68a783cf7d17aedc3469571f12b21c9254c0e9f2b95aa38bde7665ec4f59710799ca82a63ae6fa2fc3005a88f893804e3d9f5f0a840ba8c386da958e611f1e650dd62ae8515de8c326856c2df21493206863f4360711012d95d66f4d0a4498d164a0d3a6e3902bc0f19257c43bc1685f6d135ecdde0cdf8db6b897a1e8464fc65fead865aa6e9179998ebc44241a6bc67b9abf80bc3b684951a0ee4fee5c9447c17dbde0aee700a766d40b7c17f9f5dbd22386ab00221caa15031727e672b5e4c210a5d2ba4fa6a7dfab9ff59b6a25a68887ab741109674e2bfa1f44f3ab516ec0bb0137838cedfa522afb7cd520b336e96a10f3db642d70607142eb96979c9fb8d7c2896323ce984cb772258d6b0c9461c8117f0bcc4f1a3a9fcaa95fdfb7b3cba5003f9133163b73500ef226348e68544db22279bba512130f331a3561b92fd0a81dcce7b62faf3123ae54444c10da9c6a1c6a250b6d33e24bdf80cfe2d4fb1a890da9a23ecbafe6fbdbcace53dbfd89ce4b2db5e7fcaee0397a5d68157ab219ada0ae46a0ece58dbc62d337a2f8d5dbbf047acf9b7990d6da6de59dd2fe3dcd2382662bb8ae915ff96acf335cca209cc9817fe1095fdb19b153be84b92718468f3dfb94b1bdb55e9c6300997e470a6d29c143be8615b0d138b02a5adc75be6cfb2bd78af8ea336566e99c367172d50487b154855771b2c23c674f6802ade2a450dad4d881b6711bab7c8b978d2b2cdd6d5efe6897993e0b61bc082161f245b1f8e8c70183020dec3972b1afd63fff791184b05bc2ac65cf428256304b79601f48311375a63bf9dcada8279b3aaf40929f3ba9c9cd86b24954bcd07683a979811f399982d4e8a29d3a6af133ec7429bb047cc60345caaa254be82b243f5a75c70c758514af16c0af3bc272f0e864b75178b825baef6372bf234bc4f3560706ab05a755d8b75fa016420760fa30f366a0c2598a782ce54368cf467514cc2e2ec0707065100cca506d70768e80ed18942ba45d1b07743e746df53e4b47e845a6f5458f6cb24fffae3f8e7dd445c6a2f1582b7be713f3423bd353b5d7f9cbb83352c1685f3c85fed887cdb87f495edd7f052bfcdbf6f42bcb7432d263fe4c71ee3c8340194d0f3f78e9aa56577347077bcc5c6dfad169d22d070c7e655d004500bb7b49073d49bdfe8fcabe5777e38262ca303c0d77a3179c6b1f993ebf38da671854289ecd9765d36abc79493b83180b42929f4565d1ef234168e3cad1ea9f3fcebb430dfa19813dfa333d0e5fb3a8afc2792eee41b9c12ad0e355f8d4aa18345f6f45a0dce99e94966e788f100330a370c76fcd6145eb42ebf5c2d742cf2c0ef0ae6bfbc843dccb3f449a14c8f0c9b8fd0b9d254c0cbbab8ae7cedea4fa9f3242cc53a3bcf45acc30d0c975ed40be2066f9c05e072be0d589ac731aa743047014db92a69fc185a2353e22e934c4eb55fdd44149699b61188ada8c3c397076230f4226918db4aa8a68d7336ce24657df18fec7fe9f62c010b19ad5b133e8057376f834f8f2bb9c3793f0a9b4d7cfd64a876cd0ce5eaffc7f3af61a265a24c527b3a504158e2d143248e8aa30cceb64b7d57653913566d6703526c59baa2dc9c9032a5aa1c968dfdb5cb31993a110e91951536c9fd0a77e507f7d8a6e5ad913c8f8f48ca4957db29ed7780af13383eaaad49b190e6e629ce8e9523eef13ba7db1c3aa61f1a249e7887c56e6f5c3b6f8e7126c746e4192ed0117286fbe54236590c47391b1d463cd6be64d5abec708b2f1abfbf20d92206719f07b94bccbf5466a250e4e981567ccf617900c6e4b9baaa4326e650ad38505ed717bb337b663f3acc56d39515534ecce8801690d2a5104a2c86c5e2e05cb281880a7237a5527ed4c24a76a794e9f11ff9e2e6f1a78d5da5e9ff1df48eb35f7708b49c7a3809002280cf0cc0d545d88834df376638437a4ca52b081fb09baf988651a4ca97c3dd9a13b1590a0a074dfbf1b8c7e38e2b2a8962671242b0a9b95e6e7da197794e611a4949a5aaae88da50e1a3ed40151dc3bdef834020447ac191ebd71b7c9290deb02fffc3ae6a6d33606a5629b79722bc5bf4463efc6c3916c29f06020b7df62f6c6a356796f88c3d0e8355536cf72fcd3270af361d26a968d9d4e3c452e68df3d1261f09bcef731b5fd88680ba5c0fc98b73194dcafde00aab7ebda674e3d77a99a529d692d4eaf5045320b907c277f1bf0b86292865e11df76b657df0d08c983476f1b101b235f9859e8491d11bb13485345e50672a52f749aac1249165e7c46ee3931977f0971d72caead33fc676ce5fffd4e3936a8b575135eda30afd3fb5bb40d78410eb0b445626099872eefd31df29f02142f036185905af13db121e8261f8e5b6917e6a7d329d6918ff1466a3199116469b95ae40de00435642e261703ef83fd4990315bdf610668a183b48ec5c179538e6f4c7c446b2d6afe46a73cf5c9ea9e04b82fa26dc9dd0af3c1c8c97b471910f5491607135065bfc390a885c4cb1c9697f74f1d346515582d79b2538a11ad7aff093193199e4fc6571e5f3dad5c6192867ef8c589270ed2cf2a05355fbc06c70babc03cb0686da1cae49f8c10e064491466e92b7cc5c31015a616babb2f426129a23b8a7988d57d05e906027d6d61937d1bda71258c2bb88094b20821785c9f3c6b040f5f48a861e4e95f5a18aa6d37a08f6a9584fe14c8e75a01d89d24206ca747dad9ccc5098314dc56dc1f419a097c63ce156024bec90cb687fb46c5106ea3554cdd175e739e340f8149923e89de71bd17e2685bd47b98e966cbe2559f05f9534b2be4447c52111ec18e2f01d70af32ee42c3c60f7aba3e1f850d31b3a0fc90f54c48855a3f78187a8d96e0fe274baded7bc152e8e39c1156ce463bdff1e9bdea3693bf2d6cc2257869e56890ee860a6dd679abe00eb40ca4a24fcf2c051594a1065ef7a872e8aaf8dfbfc02128037936e9024e6bda3703ce172b41ad3c61b7efd77c8ca02093e7e8654cd1c1fde3020d4f08701f0e122c5e59fb9af023d435b1c842911669307be0b5ba37315c6cc8b1a5555915438de0b697a4bd10dffbdfea14a0c3a55f4d6ef24851f0d3f3087caa67233b50e2695cff09e2f6527a07b219243af0c3608df6a32cdea80f7a8eeadc62409c60ca69b9b7c6649908cc3141a738cf5c735042a6ce5c17ff0cee114aa08908d44de038000f1de81cf04eb39f7906abc9651355dc4c91f6f6276a326afb728ee5fe633e8c8f2d9727f744b2e14c2e59c1963f368e72c6fd3e7bb49afcd3983cb425b784fd7e54c5fd0dc9c57ad2322d3c729ff32e8063fede690c40988ec7d2ecc847bf052780842161208ca4d9a82e18aa5813419c1a63dd0b16abd6b9c31ddde233082f1d210667b971fe861b3ed8ed7c74700820293fc1b4289bc3b21a5ab37e436be0cf36a17aa3b20718dc7cbbdc2331e1d7d98795aaf1a2166a72a1d10cf4b6b9becaae0b4626e68d3c25520fb0832130f9bd16d0c91f9a4bc5593b8d0dbc5b79c91735345471f3413f3bd266cb128f190faf69410b6c72c527fb0f78b0a8f1d5f2b4582e5a05c7528ee83d45596c8f2e0d7dd11201bd8804e080cf18e7b5f5eebe4c00fe580d11af8738dce8661fe1a4369118518fc5ee60945f72b407094fcddceb30ec573edb59dfaf81ec848946c961166154d36dad0cb3cd95f83ca72cce02b39da5a27f65ad45e4d75d3d2c30603982ce717258acde6a209b0b16fc46696a1fd25633dee4c4960d4d724b3ab4687098f289a7463f7c5c5c94dac8fc308114aa6ff85bc6c9cd3cca1112032656ee64b07ef6d2a2a72b4e01eecb17b66a35bfef04c942e7536a0631ff3e812d98ae9214177fcd3409f88a8b3dd21ebe955d9f43a8b1d0fce3c00d8dabcc9376fcc75a8ed16c75b0decc02e4812b7c1ea06fdfa7541651eb6842bf3c9bc32e0fe650d83b0649025d1e440cf61b68a64bd5dc1d0760c7747bc54a2e14cbcfdc5833fc91db2ab8fdd28bfc7bf979795930899b6bfcf5b15a4bf72017cd2edf27675bf68c29033fe9354015fa68b8562a64c156d87efe7e4512214c85ba796f6d500cf91aa4aa93cd1cb1c0a8b873bd5ba05accef5729f668c70b9e2a987a6c914632c4ec311d10d1f879e1983e4a01a7f2bfa1d6d55eef97711bba5e8e89c14d58ef5f0188994e616817625c04acfdda5ae56c15f534a058032f5c04f62ff7657fd9abc1da42e1c469832a23c95fcd20b425c7bbc32a7f393f328003c9641b4e933e9d8dc8736a65f988b78227e85f4ae6d2dd9691205c0027b7f7988f906d4ebe007839574d0f0803f1c2c5611d98c7e4c9a52b76364c7ff8ea5a796ef5cbfbd78ccf8933e839d70eb78aa35991c98c37d1fd13c71f8f2ae123bb285e50448bd849894ac53e011dcd111f2b1745ef78293d4ebad4576d35b097df0e27ae11c2b982cec4a99"}, {0x48, 0x116, 0x200, "ebb451b92f290decc490975a0d9dd4d54815e07a8a9bc47279ffd9d4c8175e1140fb01d2d645fad4259912a1ace8aeecc20c83"}, {0x78, 0x10d, 0xfffffff9, "87a26f2029f3e4bcdc7055d472351ea1a1abb1eeee466b6f904d1897caff136f3bbd933bba42086c0b93e1937714baaf7d52ca660ae5cc1b568bb8eec98a42d177f145347fdb0df312fc6c5719339fb85a1d5379e058802feb7530609774ab823a8e3b0574e108"}], 0x13f0}}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f00000064c0)="49f9ec660836bb932f6038079e174d5a731148a91351c1331e5b926cacec5184f262530790f2c7bf533853009ad269fb979dc533c3819209eeb9ffc760fd05bc6ea73ff6e8a0589b12d59c", 0x4b}], 0x1, &(0x7f0000006580)=[{0x78, 0x101, 0x2, "571056bf11745169914afb9495fc0966fd490d51cdb483272eefa1a56d8b07e53b8f2f5a3773f6d1c6c73e8d1e79028c34d1699afb33cb2498035234c35a4afb6b67f446e810389f153e40675633196ad22fb687f97be15bae0ad8a74d7aa6608dadf7"}, {0x60, 0x115, 0xfffffeff, "8c4f27f4a9ad6477172e3adb776f37bcf9de432d1131a1d6669e185f6ce15ebd13c1237489212ca2e9114467b0deb3cd2b5e0061e0357fc297eb027fd54b58aaa2fe4f9698591c15471b052e"}, {0xb0, 0x0, 0x9, "53e49b27fa7b93eb2d496ac5bb2bf7240ed00ae611c135695bdac4133bcf80145a63026b89a63a461706d9de3a3ee48d531796fa258b903a58bc00d9d42a4be6df3baf58c2bea681ed3ae6f5804237bcaaea852a0d78b467387b5feff81f8d7f39692c77ac253e02385bc64d6b016c2a256b30bd4ad26109274703082c7217ec154606b42eea60b0a5e30b6e25c6b705e585d5269473530b85d39afb3da2"}, {0x78, 0x113, 0x8, "5a21eb29726a5a480896e688283913630d2923d149fb1942bf0623ffdd269e83f3ba5f1eb28b0a0ab0ea41cd26bacf8d0b51a2d09e94c95e9462c08bb3ef189ecdf9389bee4e7a77007fd60726c01311069ab20e0ae2782cd031cff79857f8298ed7ba"}, {0xe8, 0x1d, 0x8000, "b7974f3d416fc3402e15ae4ab45af3feb100e0accf0f84a617e140baf90fd744f11e64d89d1082602dc14cce871c39e172419940534df702d50f67b50b9678622d2f88419c4dd9329d6b7c268cb4b3ef93f1f77bd007f2aa6fa7d10b2614c515ccfe72e693126fb33273baa53a1d9fae6cbc643eaf4c4c8eb7445d13fcf4622d373a096e77d0d1bb2a705d72821da74d0a57d0b1412c0af14c39f74896b01a83a9de501acf5e251546b316ef42fa8c6b452ee56757097633a081e87f5e2254659a9c43a9c52982357deee9f7dd805858970fabb9426c9832"}, {0x90, 0x0, 0x7, "3b967049feda8ecc6a5e92ead902b48fdda3e7600ad310c730e587b5fd838ab186f4cf7c3fcc0cce1f847eca7ad261d8c4f22653b32af00cc87b75125b54dfe77fa244ba12047c633aeb5df85e6edd4a3b7a20b816b123b1b33908aa11641011947ddc7b477395c03cb020d051a35a513d594c835e9a6707c757ea9fef"}], 0x378}}, {{&(0x7f0000006900)=@sco={0x1f, @fixed={[], 0x12}}, 0x80, &(0x7f0000008c80)=[{&(0x7f0000006980)="5951897d8e37fa436dcb76a514f1c9f9529c9fed080e0a34383198f9f275a564f3e4f4f4a1de496f92a9d8d17215c6db8a9039ddb9d8302f4e71520fe31c1bf0d403bb4a8ca8f77750db5ef24a27ff8232442c6e0c3860945126cb8acc481a1d9f81c97febbef5898874bc92d9bdfba42122e7238e4b462264c4e0ea84189ad58186d27df97138edf1d994816334d41cf64fe3c7e73d317194baeb44a567898d946170369ca2fa9c99d970264e690e9cbf6c26b2b206a3438fdac1b41001a9cf57e7ff784be1d2178d69d49d6c0241e7091a6d4a17516da94c3f8af45e2391492e7a72a4491a33345c2b45077da8083baa8f7fc80fc38caf16", 0xf9}, {&(0x7f0000006a80)="dd9ea1824f541b6a02e3a8792671b8e7bc4a40235e32ef9affee65bb903b5393def5640b9393efede50ae31a9bed3c2e7254a2d4ed358142cdd47cb5ecb8358d8462a8b8d2056041cf6448d8005a9867d4f8e81a62bb97cdba40db6a31f5157b92f893bce670f378ba9aefa4f26523c0edf97f54260df99950a7e866e6faf7d93927c85274d263132e80987f19ad5a910507c278259c5530a30fb8ec04e11b8e0ece7a03015ea6ed3d1bdeb25914180e98", 0xb1}, {&(0x7f0000006b40)="d13e2699b8d21fe98591b7f17fa6011e4779af934be4070d028e3568e48b39260bee58487725", 0x26}, {&(0x7f0000006b80)="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", 0x1000}, {&(0x7f0000007b80)="c68dbf0cd4818e3d3d2df6d085b1d7e5a59892c0bf69d80484d7de13322fac5adf1b59ee648629697e2fc811a31db8c03e90a5c907188b1a8befad58eca597f8b0cb5d81fa945a78cb17af30198228e8d14a6e120b0f0c93eb241aa56e532cc30ff4b3ab7d8ace3aa144c652484516d36c3ce79bd0c1f455213ac9a462dbfae55009c93cb05acdedd8f464b28ef0edbad91bf60541262cf81c89805ec126099d8df3007a2089b6", 0xa7}, {&(0x7f0000007c40)="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", 0x1000}, {&(0x7f0000008c40)}], 0x7, &(0x7f0000008d00)=[{0x78, 0x114, 0x40, "0b99b9ee71a71b92914e2e999851d938212b3e780f88f9cacf4fd398d33d5c8d9b569f8901a269841edfa53f45ac1f1e69f6d2fcb0531f27de5b133bd0081778a1eb697cbbc389057cda61a2130ed942442b2c6bbf64965bfb0438bc2a3df74a7561"}, {0x98, 0x115, 0x1000, "8c37dd233abb7500b05eb1f4b454d77a767f998a841bcbca27c7992a1bc6721c1713a5f235d0fe891c98dc36b1754cda92865152b69d9f11c5f1b6cfcce0d131b679b03ae3bcec1122ad0693ec490181aef609e0cad403c2c0f5923e4a8426a044dc8a2dc79e9d89d4d04f8e4d8db35fa0e46987c1639732a75d19312c0a4e8c75730c19"}], 0x110}}], 0x6, 0x80) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r9 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000100)=0x3, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r11}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000080)={r11, 0x20}, &(0x7f00000000c0)=0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:31 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x3000000}) 16:07:32 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 16:07:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:32 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x1}) [ 1457.086990][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4000000}) 16:07:32 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 16:07:32 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:32 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 16:07:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x5000000}) 16:07:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x3b}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x40) 16:07:32 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:32 executing program 5: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x1}) 16:07:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6000000}) 16:07:32 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r0}) 16:07:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 16:07:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7000000}) [ 1457.736006][ T8480] usb 3-1: new high-speed USB device number 82 using dummy_hcd 16:07:32 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r0}) 16:07:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 16:07:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8000000}) [ 1457.976062][ T8480] usb 3-1: Using ep0 maxpacket: 8 16:07:33 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x400082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r0}) [ 1458.126282][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.176602][ T8480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1458.362882][ T8480] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1458.378211][ T8480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.412202][ T8480] usb 3-1: Product: syz [ 1458.425966][ T8480] usb 3-1: Manufacturer: syz [ 1458.440936][ T8480] usb 3-1: SerialNumber: syz [ 1458.455152][ T8480] usb 3-1: config 0 descriptor?? [ 1458.471379][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.753971][ T8480] usb 3-1: USB disconnect, device number 82 [ 1459.166124][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.174230][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x2, 0x2, 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x5, 0x7}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x12) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="120100bfd42a310bc10600000000000000031ff66108e91010dbd9390102030109022200050007903f09040000011dea4e000905066c6939129db0a19a1ade1cd91d"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 16:07:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x3b050000}) 16:07:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:34 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7ffffffe}) [ 1459.371185][ T389] QAT: Invalid ioctl 16:07:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 16:07:34 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 16:07:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x80040000}) 16:07:34 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) [ 1459.795933][ T2505] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1460.085856][ T2505] usb 3-1: device descriptor read/64, error 18 [ 1460.208323][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.475899][ T2505] usb 3-1: device descriptor read/64, error 18 [ 1460.775809][ T2505] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1461.055855][ T2505] usb 3-1: device descriptor read/64, error 18 [ 1461.245979][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.455794][ T2505] usb 3-1: device descriptor read/64, error 18 [ 1461.588249][ T2505] usb usb3-port1: attempt power cycle [ 1462.205914][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xf6ffffff}) 16:07:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 16:07:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r2 = creat(0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r3, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x80) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={r3, &(0x7f0000000040)=""/169}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000000380)=""/124, &(0x7f0000000400)=0x7c) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) [ 1462.286327][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.305769][ T2505] usb 3-1: new high-speed USB device number 85 using dummy_hcd 16:07:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1f, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000080)=0xffffffffffffff86) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000240)) close(0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[], 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1007}}]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) [ 1462.435778][ T2505] usb 3-1: device descriptor read/8, error -71 16:07:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfdfdffff}) 16:07:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x12b800) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 1462.645757][ T2505] usb 3-1: device descriptor read/8, error -71 16:07:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfeffff7f}) 16:07:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:37 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x84160, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) 16:07:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) 16:07:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfeffffff}) [ 1463.135713][ T2505] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1463.306344][ T2505] usb 3-1: device descriptor read/8, error -61 [ 1463.329632][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.576373][ T2505] usb 3-1: device descriptor read/8, error -61 [ 1463.697027][ T2505] usb usb3-port1: unable to enumerate USB device [ 1464.365778][ T2483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.255685][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.264363][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.273239][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.285158][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000680)="da", 0x1, r1) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000680)="da", 0x1, r2) keyctl$unlink(0x9, r1, r2) 16:07:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xff000000}) 16:07:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x40010, r0, 0x7ddb4000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff66308e90f10dbd9390102030109022200010007903f09040000011dea4e0009050600000000000007250100000000"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x13, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x4000010, r1, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0x9bea) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) [ 1465.405772][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfffffdfd}) 16:07:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video2\x00', 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000000)={0x4, 0x8000}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000080)={{0x0, 0x2, 0x8, 0x6, 'syz1\x00'}, 0x1, 0x20000240, 0xd1000000, r5, 0x1, 0x4, 'syz1\x00', &(0x7f0000000040)=['/dev/dri/card#\x00'], 0xf, [], [0x5, 0x2, 0x3, 0xfffd]}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000240)=0x28) 16:07:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 16:07:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfffffff6}) 16:07:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 16:07:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x40) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x9c91fcdb7565a424, 0x0) 16:07:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}) [ 1465.891564][T28312] usb 3-1: new high-speed USB device number 87 using dummy_hcd 16:07:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) 16:07:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) [ 1466.146462][T28312] usb 3-1: Using ep0 maxpacket: 8 [ 1466.345979][T28312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1466.445592][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.516288][T28312] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1466.525308][T28312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.534351][T28312] usb 3-1: Product: syz [ 1466.538939][T28312] usb 3-1: Manufacturer: syz [ 1466.543521][T28312] usb 3-1: SerialNumber: syz [ 1466.553460][T28312] usb 3-1: config 0 descriptor?? [ 1466.837779][T28312] usb 3-1: USB disconnect, device number 87 [ 1467.485612][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.575456][ T8480] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1467.825407][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1467.965835][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.055511][ T8480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1468.215746][ T8480] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1468.224891][ T8480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.233751][ T8480] usb 3-1: Product: syz [ 1468.238448][ T8480] usb 3-1: Manufacturer: syz [ 1468.243030][ T8480] usb 3-1: SerialNumber: syz [ 1468.253432][ T8480] usb 3-1: config 0 descriptor?? [ 1468.367345][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r2, &(0x7f0000000040)=0x1000, 0x3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) getsockopt$sock_int(r7, 0x1, 0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x100000000000000}) 16:07:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000080)={0x6000, 0x3000, 0x1f, 0xfffffffa, 0x7}) socketpair(0x1, 0x62d157e9da8da295, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x640000f1}, 0x0) dup2(r5, r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'veth1_virt_wifi\x00', {0x9}, 0x6}) 16:07:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) 16:07:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 1468.526160][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.543089][ T8480] usb 3-1: USB disconnect, device number 88 16:07:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x200000000000000}) 16:07:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x54}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x82, 0x214c00) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000080)) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0xf, 0x5, 0x7fff, &(0x7f0000000340)={0xffffffffffffffff}) dup2(r3, r6) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r7) r9 = dup3(r0, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8000000400208) sendto$phonet(0xffffffffffffffff, &(0x7f00000000c0)="c807ff76752dd2c115dac99589fd80b7cea8b5ddb50682b2831c3d684bf30795e7b8459eb7fd85575d496268cc5ab1b1d8ae35923bf69f77dd09db781ace496b0d99799b90d03be6e7ec72d968c21be93d30da2837c306aaa081bbe37e444c1eae49885045dd30b984f314a513c80ddb1bdf048b3314361d1b8306425aa36993fccf805a49eb4c548d518d47e9a05c6b29b079f7a39fbd44703da558f9045b7453256a0b3ae451350a8e650b3128415e3fa282917cf4", 0xb6, 0x40044, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 16:07:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x300000000000000}) 16:07:43 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000001}, 0x4400) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x80240) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) [ 1469.015372][ T8480] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1469.275357][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1469.405855][ T8480] usb 3-1: no configurations [ 1469.410492][ T8480] usb 3-1: can't read configurations, error -22 [ 1469.565494][ T8480] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1469.805369][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1469.925865][ T8480] usb 3-1: no configurations [ 1469.930498][ T8480] usb 3-1: can't read configurations, error -22 [ 1469.936939][ T8480] usb usb3-port1: attempt power cycle [ 1470.605474][T28312] net_ratelimit: 1 callbacks suppressed [ 1470.605479][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.645282][ T8480] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1470.735764][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1470.855753][ T8480] usb 3-1: no configurations [ 1470.860445][ T8480] usb 3-1: can't read configurations, error -22 [ 1471.015269][ T8480] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1471.105565][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1471.225284][ T8480] usb 3-1: no configurations [ 1471.229964][ T8480] usb 3-1: can't read configurations, error -22 [ 1471.237153][ T8480] usb usb3-port1: unable to enumerate USB device [ 1471.405357][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x5, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x400000000000000}) 16:07:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) 16:07:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x54}}, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) r6 = accept4$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800) dup3(r4, r6, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x80, 0x8880) 16:07:46 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x402080, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="d5900108b64023147afc21772b0e9bec4f") r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffa, 0x8a880) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = getpgrp(r2) ptrace$cont(0x20, r3, 0xf9b, 0xcd98) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 16:07:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x500000000000000}) 16:07:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) r6 = accept4$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800) dup3(r4, r6, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x80, 0x8880) [ 1471.655617][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x0, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x600000000000000}) 16:07:46 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) r2 = socket(0x10, 0x80002, 0x0) close(r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r3, 0x417, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) [ 1472.005184][ T2520] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1472.245201][ T2520] usb 3-1: Using ep0 maxpacket: 8 [ 1472.445544][ T2520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1472.615310][ T2520] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1472.624373][ T2520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.633103][ T2520] usb 3-1: Product: syz [ 1472.637665][ T2520] usb 3-1: Manufacturer: syz [ 1472.642256][ T2520] usb 3-1: SerialNumber: syz [ 1472.652010][ T2520] usb 3-1: config 0 descriptor?? [ 1472.685442][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.937563][ T2520] usb 3-1: USB disconnect, device number 93 16:07:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) r6 = accept4$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800) dup3(r4, r6, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x80, 0x8880) 16:07:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x0, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x700000000000000}) 16:07:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x77, 0x527dceb5bb3e1cda) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r9 = dup3(r8, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup3(r14, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) mkdirat(r9, &(0x7f0000000000)='./file0\x00', 0x40) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, 0x0, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x800000000000000}) 16:07:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) r6 = accept4$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800) dup3(r4, r6, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) 16:07:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x4, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000003b1d3e432e77cf9585ef8d1eee574f0903653178096af2118cebf543c20f90bbc31ebefbe6a204ddc90bf19e78c6606e8f96ad087f542b85430cb7ea", @ANYRES16=r4, @ANYBLOB="30042bbd7000fddbdf251300000006001201030000000600b500c40100000600b5009c070000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@local, 0x0}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x45, 0x10, 0x403, 0x70bd27, 0xfffffffe, {0x0, 0x0, 0x0, r7, 0x203, 0x11020}, [@IFLA_TXQLEN={0x8, 0xd, 0xfffffd8a}, @IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x62, 0x1, 0x0, "fecef9a47eaa139f7856853eb246367c", "1196693ff74b8f2fc3c1559bd49803c0585670b3244541fbab2f28d0884f562daf9763916a72b2992783a8584b32703ab4234d218197b219c092a4788d3dccf03abfcbe85cab704841a50ed13f"}, 0x62, 0x0) 16:07:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x0, 0x4, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) getsockname$unix(r1, &(0x7f0000000280), &(0x7f0000000300)=0x6e) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x3, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="050f1700a34a"]}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000c40)=""/4096, &(0x7f0000000040)=0x1000) r5 = io_uring_setup(0x171e, &(0x7f0000000040)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r5, 0x0) syz_io_uring_complete(r6) r7 = syz_io_uring_complete(r6) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000000c0)=0x80, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) fchdir(r4) 16:07:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x3b05000000000000}) 16:07:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) r6 = accept4$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800) dup3(r4, r6, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 16:07:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x0, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) [ 1473.725327][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:48 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x7ff, 0xba83, 0x8, {0x9, 0x1}, 0x6, 0x8}) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000100000000600000100e3ff000500000000000100"]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8004000000000000}) 16:07:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x0, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, 0x0, 0x4000000) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) 16:07:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r3 = dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) accept4$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800) ioctl$RTC_AIE_OFF(r2, 0x7002) 16:07:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xf6ffffff00000000}) 16:07:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000000)={0x4, 0x5544}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x39, 0x2, @thr={&(0x7f0000000040)="da8b77d791dfeba2c94b521cb3d5106230e299c6d67ad06da35c462dcd078c9ed2a9ee3060aa254e771f39dda0bd61f387f4ad6b45352444ef56508e0e5202", &(0x7f0000000080)="d7b372b40938e284078ced36b3e9d6e8f223fb"}}, &(0x7f0000000100)=0x0) timer_delete(r4) [ 1474.045136][ T2505] usb 3-1: new high-speed USB device number 94 using dummy_hcd 16:07:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x0, 0xfffffffd, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) [ 1474.295091][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1474.445451][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.496857][ T2505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1474.665263][ T2505] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1474.674326][ T2505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.682688][ T2505] usb 3-1: Product: syz [ 1474.687086][ T2505] usb 3-1: Manufacturer: syz [ 1474.691680][ T2505] usb 3-1: SerialNumber: syz [ 1474.702809][ T2505] usb 3-1: config 0 descriptor?? [ 1474.765393][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.987669][ T2505] usb 3-1: USB disconnect, device number 94 16:07:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000140)) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$RTC_AIE_OFF(r2, 0x7002) 16:07:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 16:07:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:07:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000040)={0x400, 0x7, 0x4, 0x10, 0xffffffff, {}, {0x4, 0x8, 0x80, 0x9, 0x6e, 0x3f, "9f6c37b0"}, 0x4, 0x1, @userptr=0x7, 0x1, 0x0, r4}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x9, 0x5, 0xfffffff7, 0x5, 0x4, "afae4a0f7f1fc0cdad121934261f2128c2e585", 0x3, 0xef}) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd9390102030109022200010007903f09040000011dea4e0009d6f94ac5a741109669c34c150371cd"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r1}) 16:07:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfeffff7f00000000}) 16:07:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) ioctl$RTC_AIE_OFF(r2, 0x7002) [ 1475.619722][ T28] audit: type=1326 audit(1595866070.680:49): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=716 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f1aa code=0x0 16:07:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 16:07:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 16:07:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r1}) [ 1475.806240][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.935029][T28312] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1476.065193][ T8506] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1476.210187][T28312] usb 6-1: Using ep0 maxpacket: 8 [ 1476.355096][ T8506] usb 3-1: Using ep0 maxpacket: 8 [ 1476.435098][T28312] usb 6-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 1476.445623][T28312] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1476.575223][ T8506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1476.625168][T28312] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1476.634379][T28312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.642826][T28312] usb 6-1: Product: syz [ 1476.647285][T28312] usb 6-1: Manufacturer: syz [ 1476.651952][T28312] usb 6-1: SerialNumber: syz [ 1476.663244][T28312] usb 6-1: config 0 descriptor?? [ 1476.745105][ T8506] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1476.754846][ T8506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.767210][ T8506] usb 3-1: Product: syz [ 1476.771370][ T8506] usb 3-1: Manufacturer: syz [ 1476.777844][ T8506] usb 3-1: SerialNumber: syz [ 1476.783997][ T8506] usb 3-1: config 0 descriptor?? [ 1476.845293][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.947633][T28312] usb 6-1: USB disconnect, device number 12 [ 1477.495384][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.565219][ T2520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.885214][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f00000000c0)={0x3f, 0x0, 0x17, &(0x7f0000000c00)=ANY=[]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000280)={0x0, 0x16, 0x2, "0cd9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x804, 0x1690c0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8101) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x100, 0x8, 0x100, 0x1, 0x3}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048810) 16:07:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 16:07:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x4400) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x81, 0xfff}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3a0}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x8}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x28, 0xac, "60968f3bc0f93362f1d391305245cebd9c8e9e5df93a72536883737e9fa9f4e3483a909d"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) 16:07:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0xff00000000000000}) 16:07:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r1}) [ 1478.591253][ T8506] usb 3-1: USB disconnect, device number 95 16:07:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) dup2(r2, r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$RTC_AIE_OFF(r2, 0x7002) 16:07:53 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000040)=[0x7ff, 0x8]) 16:07:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 16:07:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) dup2(r2, r1) ioctl$RTC_AIE_OFF(r2, 0x7002) [ 1478.925214][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$TIOCGETD(r5, 0x5424, &(0x7f00000000c0)) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x1d, @multicast1, 0x4e21, 0x0, 'none\x00', 0x2, 0x4ad, 0x62}, {@multicast1, 0x4e22, 0x2, 0x6, 0x1, 0xfffffffd}}, 0x44) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:07:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) [ 1479.085050][ T8506] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1479.325100][ T8506] usb 3-1: Using ep0 maxpacket: 8 [ 1479.486208][ T8506] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1479.565561][ T8506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1479.735282][ T8506] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1479.744332][ T8506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.766204][ T8506] usb 3-1: Product: syz [ 1479.775076][ T8506] usb 3-1: Manufacturer: syz [ 1479.784134][ T8506] usb 3-1: SerialNumber: syz [ 1479.803714][ T8506] usb 3-1: config 0 descriptor?? [ 1479.964941][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.288216][ T8506] usb 3-1: USB disconnect, device number 96 [ 1480.524911][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x6, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x10ffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) 16:07:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 16:07:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@generic={0x3, 0x100000000, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000280)={0x73, 0x8, &(0x7f0000000140)=[0x800, 0x6, 0xfffb, 0x8, 0x1, 0x8000, 0x80, 0x8], &(0x7f0000000180)=[0x9, 0x2, 0x7, 0x3, 0x8, 0xcca, 0x2, 0xfa1a, 0x0], &(0x7f0000000200)=[0x0, 0x122], &(0x7f0000000240)=[0x1, 0x101, 0x1118, 0x1, 0x7, 0x62, 0x7f]}) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x6, 0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x608400, 0x0) inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x5000821) 16:07:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x804, 0x1690c0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8101) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x100, 0x8, 0x100, 0x1, 0x3}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048810) 16:07:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x3, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008001) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @remote, 0x0}, &(0x7f0000000000)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', r6, 0x29, 0x9, 0x7, 0xfffffff8, 0x20, @empty, @remote, 0x7, 0x7828, 0x0, 0x1}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) [ 1481.005584][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.024753][T32441] usb 3-1: new high-speed USB device number 97 using dummy_hcd 16:07:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x44000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x4}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) 16:07:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 16:07:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 16:07:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair(0xb, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x54, r3, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x150, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x73}, {0x6, 0x16, 0x24}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x77ee}, {0x6, 0x16, 0x7b0b}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014) 16:07:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 16:07:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) [ 1481.454801][T32441] usb 3-1: device descriptor read/64, error -71 [ 1481.814697][T32441] usb 3-1: Using ep0 maxpacket: 8 [ 1482.014739][T32441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1482.044881][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.174732][T32441] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1482.183776][T32441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.204666][T32441] usb 3-1: Product: syz [ 1482.208822][T32441] usb 3-1: Manufacturer: syz [ 1482.213442][T32441] usb 3-1: SerialNumber: syz [ 1482.225720][T32441] usb 3-1: config 0 descriptor?? [ 1482.510758][T32441] usb 3-1: USB disconnect, device number 97 16:07:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$CHAR_RAW_FLSBUF(r5, 0x1261, &(0x7f0000000080)=0xffffffffffffffff) 16:07:58 executing program 4: clock_settime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '/'}], 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) semget$private(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc0c0583b, &(0x7f0000000100)) 16:07:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 16:07:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x10000, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000180)={0x2, 0x1, 0x10000, 0x8, 0x5, 0x101}) syz_open_dev$ptys(0xc, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x7, 0xa}) syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x802) 16:07:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x804, 0x1690c0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8101) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x1, 0x100, 0x8, 0x100, 0x1, 0x3}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xc0}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048810) 16:07:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = io_uring_setup(0x171e, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r1, 0x0) syz_io_uring_complete(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x203, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x6b960d13c7d434eb}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x280080d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x9a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x90, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r9}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x10010, r5, 0x10000000) r11 = io_uring_setup(0x1, &(0x7f0000000040)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0xa, 0x0, r12) syz_io_uring_submit(r2, r10, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x2610}, 0x1, {0x0, r12}}, 0x7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:07:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 16:07:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r3) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1483.084832][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:07:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4) 16:07:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc0c0583b, &(0x7f0000000100)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) 16:07:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r3) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:07:58 executing program 0: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 1483.374691][ T5] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1483.564801][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.634638][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 1483.844651][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1484.004635][ T5] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1484.013694][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.034538][ T5] usb 3-1: Product: syz [ 1484.038701][ T5] usb 3-1: Manufacturer: syz [ 1484.043285][ T5] usb 3-1: SerialNumber: syz [ 1484.066065][ T5] usb 3-1: config 0 descriptor?? [ 1484.124854][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.346997][ T5] usb 3-1: USB disconnect, device number 98 16:07:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:07:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r4}}}, 0x78) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001400)={0x150, 0xffffffffffffffda, 0x6, [{{0x0, 0x1, 0x8000, 0x80, 0x1f, 0xfffffffa, {0x0, 0x7, 0x7, 0xfffffffffffffff7, 0x100, 0x56, 0x3, 0x400, 0x2, 0x81, 0x1, 0x0, 0x0, 0x0, 0x3}}, {0x3, 0x2, 0x1, 0x2, '+'}}, {{0x1, 0x0, 0x2, 0x0, 0x671, 0x2, {0x5, 0x2, 0xa626, 0x2, 0xfffffffffffffffa, 0xffffffffffffffff, 0x23f, 0x7, 0x2, 0xc896, 0x7, 0x0, r4, 0x2, 0x8000}}, {0x1, 0x9, 0x1, 0x4, '^'}}]}, 0x150) fchown(r0, r3, r4) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r6) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r8, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012cc9493b2a45bdcc007c8aa05f00000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000040) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:07:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r3) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:07:59 executing program 1: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 16:07:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x18fec}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/163, 0xa3}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000740)=""/242, 0xf2}, 0x40010062) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x0, 0x11) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f00000003c0)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, 0x0, 0xfeca}, 0x800) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, 0x0}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) 16:07:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000240)) accept4$llc(r2, &(0x7f0000000000), &(0x7f0000001300)=0x10, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f0000001200)="909424b657c51ecd7a41231f2d00c914b69b872c7afcd9d66406319a058e2573e1ad7c537f63b14f7295e80d3e446c1b0d87cb5dac89b5d54cb4a39ff858e78a331f154e755ddc1ceac3fe9a2398988871145a66254b0b7bf88f26fc36cd5f0137111c309c93916e197f6313e4fcc85a58a3bcafe37fa5d107e22ae8d63b373d3aec225909f538ccdbd238ebd3e02c20df0e0d1ed2f156d7796561e3f27f7ecb7dc852faf26e9e494d4023a87768d41222820d78e3b3c3f1cd8776f7c2cceba8d2faffffffffffffffbaeaa52996fff9b2103004bd7b03ea02ce5fc1", &(0x7f0000000040)=""/3, &(0x7f0000000200)="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", &(0x7f0000000100)="11830a21cc9365ce2fdf60bab22fc22edea5dbdf102858712ab00517e58c63ca0a282599fab58b883f76662d04f793198b24a00183ea2c0c41e16406bb89915580b274af063ac758c3c5cbac9bf85ac2c1b42554cf8641abe9c8f0e3d679855e1f99996e9e82f1f52ed4785f3c03054d33da88dd09ece0dab8043a8a6fb5148be1646b0c582d328ae0e0e1f4207b30407ea882d4f52d23e356e67f66648e6cf58f11bc32cb29f167f5cfef34a1cbf07d39a693d2", 0x80000001, r1}, 0x38) 16:08:00 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:08:00 executing program 3: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:08:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r8, r3) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) [ 1484.956589][ T947] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1484.981563][ T947] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1484.994785][ T940] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1485.082851][ T957] FAULT_INJECTION: forcing a failure. [ 1485.082851][ T957] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.117591][ T950] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 16:08:00 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x401, 0x4) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x1e1080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) [ 1485.131781][ T950] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1485.152939][ T957] CPU: 1 PID: 957 Comm: syz-executor.5 Not tainted 5.8.0-rc7-syzkaller #0 [ 1485.161442][ T957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.171486][ T957] Call Trace: [ 1485.174773][ T957] dump_stack+0x18f/0x20d [ 1485.179116][ T957] should_fail.cold+0x5/0x14 [ 1485.183712][ T957] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1485.189431][ T957] should_failslab+0x5/0xf [ 1485.193853][ T957] __kmalloc+0x27d/0x340 [ 1485.198106][ T957] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1485.203657][ T957] tomoyo_realpath_from_path+0xc3/0x620 [ 1485.209205][ T957] ? tomoyo_profile+0x42/0x50 [ 1485.213889][ T957] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1485.219352][ T957] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1485.224981][ T957] ? tomoyo_execute_permission+0x470/0x470 [ 1485.230782][ T957] ? lock_acquire+0x1f1/0xad0 [ 1485.235453][ T957] ? delayed_put_pid+0x30/0x30 [ 1485.240238][ T957] ? lock_is_held_type+0xb0/0xe0 [ 1485.245188][ T957] ? selinux_inode_getsecctx+0x90/0x90 [ 1485.250642][ T957] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1485.256184][ T957] ? lock_is_held_type+0xb0/0xe0 [ 1485.261126][ T957] ? __fget_files+0x294/0x400 [ 1485.265826][ T957] security_file_ioctl+0x50/0xb0 [ 1485.270855][ T957] ksys_ioctl+0x50/0x180 [ 1485.275096][ T957] __x64_sys_ioctl+0x6f/0xb0 [ 1485.279687][ T957] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1485.284811][ T957] do_syscall_64+0x60/0xe0 [ 1485.289229][ T957] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1485.295112][ T957] RIP: 0033:0x45c369 [ 1485.299006][ T957] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1485.323064][ T957] RSP: 002b:00007f2ded1fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:08:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r7, r3) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1485.331500][ T957] RAX: ffffffffffffffda RBX: 000000000000bb80 RCX: 000000000045c369 [ 1485.339464][ T957] RDX: 0000000020000040 RSI: 00000000c01064b3 RDI: 0000000000000003 [ 1485.347424][ T957] RBP: 00007f2ded1fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.355384][ T957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1485.363346][ T957] R13: 00007ffc297a0d1f R14: 00007f2ded1fd9c0 R15: 000000000078bf0c [ 1485.376186][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.397423][ T947] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1485.537449][T32441] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1485.571128][ T957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1485.784677][T32441] usb 3-1: Using ep0 maxpacket: 8 [ 1485.984948][T32441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1486.154958][T32441] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1486.164089][T32441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.172498][T32441] usb 3-1: Product: syz [ 1486.176797][T32441] usb 3-1: Manufacturer: syz [ 1486.181417][T32441] usb 3-1: SerialNumber: syz [ 1486.187710][T32441] usb 3-1: config 0 descriptor?? [ 1486.444591][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.478025][T32441] usb 3-1: USB disconnect, device number 99 [ 1486.616666][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd9390102030109022200010007f87c2bb4787a09050600000000000007250112000000"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 16:08:02 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x610000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000203010100001900000000000c000000080001000100002a0800034700000003080001000400000a"], 0x2c}}, 0x4800) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x7fff, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 16:08:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000040)=0xfff) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff1000/0xd000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007c1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000aeb000/0x2000)=nil, &(0x7f000085c000/0x1000)=nil, &(0x7f0000772000/0x2000)=nil, &(0x7f0000c3a000/0x4000)=nil, &(0x7f0000854000/0x2000)=nil, &(0x7f00009be000/0x3000)=nil, &(0x7f0000000100)="e45187ab3592ff0232cc7fc65373eb7a55eb41f85deca48d417f25f7b2f91813df6b576db7331899d8e3eef7ce591b00568566af3aa2df1a7fed14ef6547adf9710f5bde1a23efa362c4af506609941ed57330bab0ce9470d635260bf078c40f872568c11ec7d5bdd577eee3c996264093b48c54cd84a87eee077042118fd8c3d92ad1fbe4450ac22a1f8553f980b4bfd89eb74efd19fe483d0cb3fb6c431ca1bd7038928ea1c84c937404", 0xab, r4}, 0x68) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000200)=""/203) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f00000000c0)=0xff) 16:08:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:02 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:08:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) [ 1486.998753][ T1002] FAULT_INJECTION: forcing a failure. [ 1486.998753][ T1002] name failslab, interval 1, probability 0, space 0, times 0 16:08:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl(r2, 0xffff, &(0x7f0000000200)="1c8a21658efcb7ef0a1bcdffd531e1915f0a68630c94a9282c334bf0682982b6a16c94e4518ef6177464f1d0dba3a6291b40bbbb6c118617da79ec7d7887e1a138c27bbdbad052c65508ea04b758b3870825e135d33a4d47527d86cbd8c4cfa09d63102e0ef7d764919a1f329d126425a8d0dbba28afe6c11a4f2d55857d9cbe00ab94d14170cd70cc4b7ced9c0a8a4193fa46e8cdece42fd235597e445e1bec979be9cd392a9bcf630a743e2d179c45846b1ad5b7e76a233ec5eca38f0d2e8271c72db35adb18a910d92da958be5dfec897fa9e498150103d305d8244f1025491959f2e00f76f8a75f847a094e058c39985") ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) [ 1487.042023][ T1002] CPU: 1 PID: 1002 Comm: syz-executor.5 Not tainted 5.8.0-rc7-syzkaller #0 [ 1487.050613][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.060670][ T1002] Call Trace: [ 1487.063962][ T1002] dump_stack+0x18f/0x20d [ 1487.068307][ T1002] should_fail.cold+0x5/0x14 [ 1487.072913][ T1002] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1487.078281][ T1002] should_failslab+0x5/0xf [ 1487.082695][ T1002] __kmalloc+0x27d/0x340 [ 1487.086941][ T1002] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1487.092664][ T1002] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1487.097861][ T1002] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1487.103582][ T1002] tomoyo_encode+0x28/0x50 [ 1487.107999][ T1002] tomoyo_realpath_from_path+0x186/0x620 [ 1487.113640][ T1002] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1487.119096][ T1002] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1487.124728][ T1002] ? tomoyo_execute_permission+0x470/0x470 [ 1487.130538][ T1002] ? lock_acquire+0x1f1/0xad0 [ 1487.135207][ T1002] ? delayed_put_pid+0x30/0x30 16:08:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f00000000c0)=0x54) [ 1487.139971][ T1002] ? lock_is_held_type+0xb0/0xe0 [ 1487.144918][ T1002] ? selinux_inode_getsecctx+0x90/0x90 [ 1487.150375][ T1002] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1487.150388][ T1002] ? lock_is_held_type+0xb0/0xe0 [ 1487.150408][ T1002] ? __fget_files+0x294/0x400 [ 1487.150430][ T1002] security_file_ioctl+0x50/0xb0 [ 1487.150448][ T1002] ksys_ioctl+0x50/0x180 [ 1487.150464][ T1002] __x64_sys_ioctl+0x6f/0xb0 [ 1487.179431][ T1002] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1487.184534][ T1002] do_syscall_64+0x60/0xe0 [ 1487.188951][ T1002] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1487.194836][ T1002] RIP: 0033:0x45c369 [ 1487.198726][ T1002] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1487.218316][ T1002] RSP: 002b:00007f2ded1fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.226720][ T1002] RAX: ffffffffffffffda RBX: 000000000000bb80 RCX: 000000000045c369 [ 1487.234680][ T1002] RDX: 0000000020000040 RSI: 00000000c01064b3 RDI: 0000000000000003 16:08:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) [ 1487.242650][ T1002] RBP: 00007f2ded1fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.250609][ T1002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.258570][ T1002] R13: 00007ffc297a0d1f R14: 00007f2ded1fd9c0 R15: 000000000078bf0c 16:08:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 1487.287359][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.298285][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.307591][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.316717][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.393962][ T1002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1487.456165][ T5] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1487.485310][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.714407][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 1487.924885][ T5] usb 3-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1487.944371][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1488.124911][ T5] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1488.137381][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.149253][ T5] usb 3-1: Product: syz [ 1488.153489][ T5] usb 3-1: Manufacturer: syz [ 1488.162439][ T5] usb 3-1: SerialNumber: syz [ 1488.171877][ T5] usb 3-1: config 0 descriptor?? [ 1488.451754][ T5] usb 3-1: USB disconnect, device number 100 [ 1488.524638][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', r5, 0x7, 0x7800, 0x1, 0xb6, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x66, 0x0, 0x81, 0x29, 0x0, @local, @rand_addr=0x64010102}}}}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x12a, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004080) r7 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd93901027316419820ce43d665ab8fcc0007903f09040000011dea4e0009050600000000000007250100000000"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="5f9cd957131d76396ca0aa37d6ca8e08953b1eb738d38a6f71cdaa050d0db9a4acd791881b2eb45905aa4e45edd2228021adb8243d399acb4c0427bc429e6db01887d361af5bbb0ba3e2431d9dd454449b1454093856889488120c581665e75994a05f761af02b1539105a19097c3b5d1ad483c4ac4d5d15025991e96a4f47574473291ad6d46f9e695c03bffc32e2f870932b947a7df04143b88b4f628e3445f301599f72d9a325a575f93316f131fc0e3cb85dd30e71daabca07"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:04 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 16:08:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:04 executing program 5 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:08:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:04 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 16:08:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1489.038364][ T1056] FAULT_INJECTION: forcing a failure. [ 1489.038364][ T1056] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.093813][ T1056] CPU: 0 PID: 1056 Comm: syz-executor.5 Not tainted 5.8.0-rc7-syzkaller #0 [ 1489.102421][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.112463][ T1056] Call Trace: [ 1489.115748][ T1056] dump_stack+0x18f/0x20d [ 1489.120075][ T1056] should_fail.cold+0x5/0x14 [ 1489.124664][ T1056] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1489.130029][ T1056] should_failslab+0x5/0xf [ 1489.134442][ T1056] __kmalloc+0x27d/0x340 [ 1489.138683][ T1056] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1489.144404][ T1056] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1489.149596][ T1056] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1489.155311][ T1056] tomoyo_encode+0x28/0x50 [ 1489.159724][ T1056] tomoyo_realpath_from_path+0x186/0x620 [ 1489.165356][ T1056] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1489.170815][ T1056] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1489.176450][ T1056] ? tomoyo_execute_permission+0x470/0x470 [ 1489.182249][ T1056] ? lock_acquire+0x1f1/0xad0 [ 1489.186917][ T1056] ? delayed_put_pid+0x30/0x30 [ 1489.191683][ T1056] ? lock_is_held_type+0xb0/0xe0 [ 1489.196633][ T1056] ? selinux_inode_getsecctx+0x90/0x90 [ 1489.202089][ T1056] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1489.207626][ T1056] ? lock_is_held_type+0xb0/0xe0 [ 1489.212564][ T1056] ? __fget_files+0x294/0x400 [ 1489.217243][ T1056] security_file_ioctl+0x50/0xb0 [ 1489.222175][ T1056] ksys_ioctl+0x50/0x180 [ 1489.226414][ T1056] __x64_sys_ioctl+0x6f/0xb0 [ 1489.230997][ T1056] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1489.236107][ T1056] do_syscall_64+0x60/0xe0 [ 1489.240520][ T1056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1489.246412][ T1056] RIP: 0033:0x45c369 [ 1489.250303][ T1056] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1489.269898][ T1056] RSP: 002b:00007f2ded1fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.278386][ T1056] RAX: ffffffffffffffda RBX: 000000000000bb80 RCX: 000000000045c369 [ 1489.286347][ T1056] RDX: 0000000020000040 RSI: 00000000c01064b3 RDI: 0000000000000003 16:08:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1489.294305][ T1056] RBP: 00007f2ded1fcca0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.302389][ T1056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1489.310349][ T1056] R13: 00007ffc297a0d1f R14: 00007f2ded1fd9c0 R15: 000000000078bf0c 16:08:04 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 16:08:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1489.413503][ T1056] ERROR: Out of memory at tomoyo_realpath_from_path. 16:08:04 executing program 5 (fault-call:2 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:08:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl(r2, 0xffff, &(0x7f0000000200)="1c8a21658efcb7ef0a1bcdffd531e1915f0a68630c94a9282c334bf0682982b6a16c94e4518ef6177464f1d0dba3a6291b40bbbb6c118617da79ec7d7887e1a138c27bbdbad052c65508ea04b758b3870825e135d33a4d47527d86cbd8c4cfa09d63102e0ef7d764919a1f329d126425a8d0dbba28afe6c11a4f2d55857d9cbe00ab94d14170cd70cc4b7ced9c0a8a4193fa46e8cdece42fd235597e445e1bec979be9cd392a9bcf630a743e2d179c45846b1ad5b7e76a233ec5eca38f0d2e8271c72db35adb18a910d92da958be5dfec897fa9e498150103d305d8244f1025491959f2e00f76f8a75f847a094e058c39985") ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) [ 1489.564468][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.644538][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.687565][ T8480] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1489.954331][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1490.124858][ T8480] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1490.136188][ T8480] usb 3-1: too many configurations: 22, using maximum allowed: 8 [ 1490.264839][ T8480] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1490.274799][ T8480] usb 3-1: can't read configurations, error -61 [ 1490.434258][ T8480] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1490.674984][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1490.836768][ T8480] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1490.844601][ T8480] usb 3-1: too many configurations: 22, using maximum allowed: 8 [ 1490.964325][ T8480] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1490.971999][ T8480] usb 3-1: can't read configurations, error -61 [ 1490.979318][ T8480] usb usb3-port1: attempt power cycle [ 1491.644802][T32441] net_ratelimit: 1 callbacks suppressed [ 1491.644806][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.694264][ T8480] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1491.784265][ T8480] usb 3-1: Using ep0 maxpacket: 8 16:08:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="05f800"/16]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 16:08:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x36b602) r1 = io_uring_setup(0x171e, &(0x7f0000000040)={0x0, 0x0, 0x1}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r1, 0x0) syz_io_uring_complete(r2) syz_io_uring_complete(r2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r6, r5) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000001a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c5}, 0x40) r8 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000100)={0x4, 0xfc000000, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990906, 0x8, [], @p_u32=&(0x7f0000000000)=0x3}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r11, 0x1}, 0x14}}, 0x0) recvmsg$can_j1939(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000740)=""/156, 0x9c}], 0x8, &(0x7f0000000880)=""/183, 0xb7}, 0x2000) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r11, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) 16:08:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl(r2, 0xffff, &(0x7f0000000200)="1c8a21658efcb7ef0a1bcdffd531e1915f0a68630c94a9282c334bf0682982b6a16c94e4518ef6177464f1d0dba3a6291b40bbbb6c118617da79ec7d7887e1a138c27bbdbad052c65508ea04b758b3870825e135d33a4d47527d86cbd8c4cfa09d63102e0ef7d764919a1f329d126425a8d0dbba28afe6c11a4f2d55857d9cbe00ab94d14170cd70cc4b7ced9c0a8a4193fa46e8cdece42fd235597e445e1bec979be9cd392a9bcf630a743e2d179c45846b1ad5b7e76a233ec5eca38f0d2e8271c72db35adb18a910d92da958be5dfec897fa9e498150103d305d8244f1025491959f2e00f76f8a75f847a094e058c39985") ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="ffe1f8f44092d09ffcf77d6aff17276a985cdd951e5f61312b3be1a5f896924b3b27db9243df619544ffa0b1dcdea5f599a9157b8a996311a4408974defe1f1306c400c8461387163da36b72adb401f279b96459d6ebbaced9ed0f53a45a56c4c791cee6ef658277a75cffa42066dffa56323788c737f64f", 0x78, 0x0}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000140)=0x5) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={r3}) [ 1491.944219][ T8480] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1491.951948][ T8480] usb 3-1: too many configurations: 22, using maximum allowed: 8 16:08:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1492.034298][ T8480] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1492.057301][ T8480] usb 3-1: can't read configurations, error -71 16:08:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl(r2, 0xffff, &(0x7f0000000200)="1c8a21658efcb7ef0a1bcdffd531e1915f0a68630c94a9282c334bf0682982b6a16c94e4518ef6177464f1d0dba3a6291b40bbbb6c118617da79ec7d7887e1a138c27bbdbad052c65508ea04b758b3870825e135d33a4d47527d86cbd8c4cfa09d63102e0ef7d764919a1f329d126425a8d0dbba28afe6c11a4f2d55857d9cbe00ab94d14170cd70cc4b7ced9c0a8a4193fa46e8cdece42fd235597e445e1bec979be9cd392a9bcf630a743e2d179c45846b1ad5b7e76a233ec5eca38f0d2e8271c72db35adb18a910d92da958be5dfec897fa9e498150103d305d8244f1025491959f2e00f76f8a75f847a094e058c39985") ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000000)=0x1f) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:08:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x2, &(0x7f0000000040)={r1}) 16:08:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000200)=@urb_type_interrupt={0x1, {0xb, 0x1}, 0x3ff, 0x0, &(0x7f0000000040)="d8af7d5994bf456679e8d6684ce57c4ab2724cb2d99eb813996dd5aea2efd8f80d4357a6dfd4991953ff4d0fc86d5e459cfd44c8cd6454cc79c6fb0100000000000078c89f24b86ca854f3ed7adecb0600000000000000c901fa50911333e639a8bb949b12f7638cdb56e08fb7c4848a80e6c6981991539b9876cde88ca321ad93860b9ca11c926ebfa2e670b811c72b34aac0d6d73b086180fafe5dfdbc491ab9000000000000", 0xa7, 0x5, 0x1fc0000, 0x0, 0x3, 0xc, &(0x7f0000000100)}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfe01, 0x7, 0x8, 0xc30e, 0xff}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1492.474256][ T8480] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1492.564664][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1492.684406][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.692492][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.724277][ T8480] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1492.804196][ T8480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1492.928163][T13009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.937009][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.947365][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.964989][ T8480] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1492.974171][ T8480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.982132][ T8480] usb 3-1: Product: syz [ 1492.987333][ T8480] usb 3-1: Manufacturer: syz [ 1492.991906][ T8480] usb 3-1: SerialNumber: syz [ 1493.001539][ T8480] usb 3-1: config 0 descriptor?? [ 1493.286539][ T8480] usb 3-1: USB disconnect, device number 104 16:08:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', r7}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0x20, 0x1d, 0x70, &(0x7f0000000380)}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000337dfac1ff66108e9a02eb8a1052a24380f10dbd93901020301090222000107000000090400000106004e0007250100000000"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x10, &(0x7f0000000040)={r1}) 16:08:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl(r2, 0xffff, &(0x7f0000000200)="1c8a21658efcb7ef0a1bcdffd531e1915f0a68630c94a9282c334bf0682982b6a16c94e4518ef6177464f1d0dba3a6291b40bbbb6c118617da79ec7d7887e1a138c27bbdbad052c65508ea04b758b3870825e135d33a4d47527d86cbd8c4cfa09d63102e0ef7d764919a1f329d126425a8d0dbba28afe6c11a4f2d55857d9cbe00ab94d14170cd70cc4b7ced9c0a8a4193fa46e8cdece42fd235597e445e1bec979be9cd392a9bcf630a743e2d179c45846b1ad5b7e76a233ec5eca38f0d2e8271c72db35adb18a910d92da958be5dfec897fa9e498150103d305d8244f1025491959f2e00f76f8a75f847a094e058c39985") ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/dri/card#\x00') bind$phonet(r1, &(0x7f0000000000)={0x23, 0x72, 0x1f, 0x6}, 0x10) 16:08:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x228800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x10, 0x1f, 0x9, 0xd, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x0, 0x4, {0x6, 0x32, 0x9, 0x20, 0x0, 0x5, 0x0, @in=@multicast2, @in6=@empty}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_nat_t_type={0x1, 0x14, 0x40}]}, 0x68}}, 0x20040080) r5 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x7) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f00000000c0)={0x0, 0x5, 0x100}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=""/148) [ 1493.724305][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x4b47, &(0x7f0000000040)={r1}) 16:08:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x6}) 16:08:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) [ 1494.184116][ T2517] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1494.454073][ T2517] usb 3-1: device descriptor read/64, error 18 [ 1494.771230][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.844032][ T2517] usb 3-1: device descriptor read/64, error 18 [ 1495.114049][ T2517] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1495.394005][ T2517] usb 3-1: device descriptor read/64, error 18 [ 1495.724543][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.783984][ T2517] usb 3-1: device descriptor read/64, error 18 [ 1495.814168][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.904725][ T2517] usb usb3-port1: attempt power cycle [ 1496.613936][ T2517] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1496.704381][ T2517] usb 3-1: Invalid ep0 maxpacket: 31 16:08:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) r1 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x4b49, &(0x7f0000000040)={r1}) 16:08:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1, 0x40000}) 16:08:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x4280) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x400, 0x1ff, 0x8, 0xfffffff8, 0x0}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) r4 = dup3(r3, r0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0x8001, 0x1000, 0x401, 0x72d, 0x7, "a04d20b060b994ca7cdfcdb06fedbcc633f10e", 0xffffff01, 0x7fff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) [ 1496.844794][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.864240][ T2517] usb 3-1: new high-speed USB device number 108 using dummy_hcd 16:08:12 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x6, 0x180}, {0x2}]}, 0x14, 0x3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) alarm(0x28df) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x66, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x8000006, 0xfffffdfd}) 16:08:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x7, 0x260800) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000440)) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/102, 0x66}], 0x6) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x4a00, 0x0) 16:08:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) socket$isdn_base(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x4c00, &(0x7f0000000040)={r1}) 16:08:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x4c01, &(0x7f0000000040)={r1}) 16:08:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x40) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x10009, 0x1}) [ 1497.353950][ T2517] usb 3-1: device not accepting address 108, error -71 [ 1497.361886][ T2517] usb usb3-port1: unable to enumerate USB device [ 1497.733900][ T2517] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1497.884010][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.983979][ T2517] usb 3-1: Using ep0 maxpacket: 8 [ 1498.204025][ T2517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1498.374649][ T2517] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1498.383670][ T2517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.392591][ T2517] usb 3-1: Product: syz [ 1498.397172][ T2517] usb 3-1: Manufacturer: syz [ 1498.401746][ T2517] usb 3-1: SerialNumber: syz [ 1498.410232][ T2517] usb 3-1: config 0 descriptor?? [ 1498.697197][ T2517] usb 3-1: USB disconnect, device number 109 [ 1498.764443][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.925380][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd939010203010902220001002200000000000825010000ce56ede0122f0df1187dc1"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x4, 0x8000) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syzkaller1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="4b0000000e0000007f0000008c00000000800000010000000010000004000000ff03000002000000b70600000100000080000000090000002000000002000000810000000004000009000000f9ffffff00000100230a00007565561b0800000000000000a6d600000101000001000080200000000000000041000000ff0100000700000001000000ffffffff0400000000000000ff010000f60800000000008004000000040000000000000000000000f9ffffff00000000000000000600000001000100080000007401000007000000feffffff0400000000000000740000000300000001000080000100004000000003000000040000000700000000000080000000007c000000ff010000ffffffff0900000030050000ff7f000003000000000000000400000005000000ff03000005000000040000000010000006000000810000000000000000000000020000000200000003000000000000000200000000000000020000000000000009000000010000001f00000006000000e30000003f0000000500000000040000ff01000006000000020000000700000005000000070000000104000007000000e0ffffff0101000006000000030000000000000007000000030000000000000000200000530000000010000040000000eb02000008000000339e000003000000030000000200000007000000ff0000000700000053070000001000009cec8bcc73667b7035600f7920c9260414ad916737ef3c5fdc476378a77b84e606d97bd6d5168614822b2c3e598983d9747721e7a18ca588717aab9022fe43da2db53bdff6468b6ff28fa2c9429538fcc29c22134540f26328fde2dfa492eafe9a92b624a4995db7679236a659c20a285786e2692d5016c41e3c91b0b18dd3e6f5ac75e6e1260f00b2dc34096799bf95d1a7ec6da5"]}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x1) 16:08:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_data=&(0x7f0000000000)="440a91c5d6d8bd2aa04a3704508054675191cd977367a15f1a40526aecfdb5af"}}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:14 executing program 0: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100000000, 0x492140) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x541b, &(0x7f0000000040)={r1}) 16:08:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x5421, &(0x7f0000000040)={r1}) 16:08:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:14 executing program 0: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x165000, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) 16:08:14 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x440000) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:14 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4080) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) socketpair(0x1, 0x5, 0x2000, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0) dup2(r5, r4) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(r6, 0x1, 0x4, 0x0, &(0x7f0000000300)) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'ipvlan1\x00', {0x2, 0x4e23, @multicast1}}) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffc69}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) dup2(r8, r7) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) r9 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1f, 0x1106a0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000080)={0x4, 0x8, 0x4000004}) [ 1499.649294][T32441] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1499.913765][T32441] usb 3-1: Using ep0 maxpacket: 8 [ 1499.964658][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.093789][T32441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1500.183827][T32441] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.193962][T32441] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1500.354074][T32441] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1500.363358][T32441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.372348][T32441] usb 3-1: Product: syz [ 1500.377096][T32441] usb 3-1: Manufacturer: syz [ 1500.381734][T32441] usb 3-1: SerialNumber: syz [ 1500.387882][T32441] usb 3-1: config 0 descriptor?? [ 1500.676003][T32441] usb 3-1: USB disconnect, device number 110 [ 1501.004187][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:16 executing program 1: ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfffffffffffffff8) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000080)={0x10, 0x0, 0x3}) 16:08:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x5450, &(0x7f0000000040)={r1}) 16:08:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000000c0)={0x4, 0x1}) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff66108e90f10dbf1390102030109022200010007903f09040000011dea4e0009050600000000000007250100000000"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="050f1700022bf5e59443341f663d8ff42978e349c31519557cf0f5ff50e33864a87785e3c7e5855b4569ba56d396208d8f89371e398f8c9435aef0f9d3b3bb43ea93019f842b8c2491009682f58d54c130"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:08:16 executing program 1: ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:16 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x5451, &(0x7f0000000040)={r1}) 16:08:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5301, 0x2) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000040)=0x1ff) 16:08:16 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xfffffffffffffee8}, 0x1, 0x0, 0x0, 0x4000000}, 0x12) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x918, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x966}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x45) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r6, r5) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000240)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x54, r7, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x35, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x140, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2b0e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7547a988}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x42}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x77ac}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x50}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x8, 0x6ef1}]}, 0xc, 0x1) 16:08:16 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:16 executing program 1: ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x5452, &(0x7f0000000040)={r1}) 16:08:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1000000400, 0x103800) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x80000, 0x0) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x170a}, 0xb) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101080, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/136) [ 1501.543787][ T5] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1501.796192][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 1501.809006][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.003779][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1502.043863][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.183736][ T5] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.f1 [ 1502.192915][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.201227][ T5] usb 3-1: Product: syz [ 1502.206462][ T5] usb 3-1: Manufacturer: syz [ 1502.211089][ T5] usb 3-1: SerialNumber: syz [ 1502.219315][ T5] usb 3-1: config 0 descriptor?? [ 1502.519359][ T5] usb 3-1: USB disconnect, device number 111 [ 1502.531698][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.083769][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.246432][ T8480] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1503.513574][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1503.723682][ T8480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1503.894441][ T8480] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.f1 [ 1503.903512][ T8480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.911479][ T8480] usb 3-1: Product: syz [ 1503.915961][ T8480] usb 3-1: Manufacturer: syz [ 1503.920550][ T8480] usb 3-1: SerialNumber: syz [ 1503.930736][ T8480] usb 3-1: config 0 descriptor?? [ 1504.123792][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:19 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x5460, &(0x7f0000000040)={r1}) 16:08:19 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:08:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x140, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xd6ba458f9a427de) 16:08:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)={0x10040, 0x144}, 0x18) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1a, '\x00', "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"}}, 0x110) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="b54dff00000000000180ad00937a308f809105e3a8d2b674ff6b16701191cbe233dfd4e6a89d6b05ebd7ffe74eaa28f2cdea7040b51cee26b15e8e42d16fdd04b6c28497daf7b32c15519661da1c09f06301b9"]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)={'nat\x00'}, &(0x7f00000000c0)=0x78) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) [ 1504.224854][ T8480] usb 3-1: USB disconnect, device number 112 16:08:19 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x6364, &(0x7f0000000040)={r1}) 16:08:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) io_setup(0xffffffff, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x637a, &(0x7f0000000040)=0x0) io_cancel(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xf001, r0, &(0x7f0000000200)="b7939e6e6a4ce99f2bd752b4e24e2655a769a4732fa102063263f5151d1239e8eae9fd197d0991316a338b75851aace80d432642e29327d6eaeabef53fcffc35d5784ef34f4be59403fb5fd15089780eff092682b6c17c4c3abc16bb82c578f89b60fe0a454a630cd4ad6ccbc401881b1433f4f898da268465a0a67a6f3aa462f4c2a2d3d57ef813541c5e72aa8ee2cedd5ad09c3e1a95d2fd9fc59d06277105af41bd30f76422d38a73f675f0a03d0df3a9d1f3c654f04ad98f", 0xba, 0xfac, 0x0, 0x5, r3}, &(0x7f0000000140)) 16:08:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x3, 0x246b60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:08:19 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:19 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:08:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x8912, &(0x7f0000000040)={r1}) 16:08:19 executing program 1: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:19 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000380)='ip_vti0\x00') getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x200008c0) dup2(r1, r0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x540) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x2c, 0x40000009, 0x1}) [ 1504.713722][ T8480] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1504.843765][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.953528][ T8480] usb 3-1: Using ep0 maxpacket: 8 [ 1505.114059][ T8480] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1505.178774][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.194031][ T8480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1505.379041][ T8480] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1505.393498][ T8480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.401487][ T8480] usb 3-1: Product: syz [ 1505.423447][ T8480] usb 3-1: Manufacturer: syz [ 1505.428051][ T8480] usb 3-1: SerialNumber: syz [ 1505.453953][ T8480] usb 3-1: config 0 descriptor?? [ 1505.736002][ T8480] usb 3-1: USB disconnect, device number 113 [ 1506.203665][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.503417][ T2517] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1506.763489][ T2517] usb 3-1: Using ep0 maxpacket: 8 [ 1506.924059][ T2517] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1507.004139][ T2517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1507.183955][ T2517] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1507.193029][ T2517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.201747][ T2517] usb 3-1: Product: syz [ 1507.206405][ T2517] usb 3-1: Manufacturer: syz [ 1507.210998][ T2517] usb 3-1: SerialNumber: syz [ 1507.217100][ T2517] usb 3-1: config 0 descriptor?? 16:08:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x115000, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x1f, 0xf6, 0x61, 0x8, 0xfe9, 0xdb10, 0x39d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x7, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1d, 0xea, 0x4e, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x8933, &(0x7f0000000040)={r1}) 16:08:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:22 executing program 0: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = dup2(r1, r0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r4, r3) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r6, r5) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000240)) r7 = socket(0x10, 0x80002, 0x0) close(r7) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r8, 0x417, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4073}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 16:08:22 executing program 1: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = dup2(r2, r1) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x80000001, @private2={0xfc, 0x2, [], 0x1}, 0x5}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x2, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000180)={0x101, r6, 0x10001, 0x9}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r5, r4) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000000000000070000040900020073797a300000000008000c4000000002e8e83489b89cca249128fe8685fd047b3e0bdd6e266d02f348b2011a4415a3893f3f05ffa34984c4dde02ff0452f0ded0baa6df45a900e71a63d5aa65e4c0a64d9ec1701b1187f666765ff6bc489eb50184ba1cbdfcf690674bae50db39898912ae08fc7a8e5712ff635b2ce36170073ae53e088ef4e030380d6ccf432a094eec79149276f7328869519dd67462f0dd679c9ccc4d68dc96a302d6d21f722d2453bd44ba3d12542690a9f15a8b2384e9606e13db7b1c264f1"], 0x28}}, 0x30004810) [ 1507.257115][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.282648][ T2517] usb 3-1: can't set config #0, error -71 16:08:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xae01, &(0x7f0000000040)={r1}) [ 1507.323894][ T2517] usb 3-1: USB disconnect, device number 114 16:08:22 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:22 executing program 1: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0xb1ca}) 16:08:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000100)={0x3, 0x7fffffff}) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r8, 0x80184132, &(0x7f0000000040)) dup2(r5, r4) getsockopt$sock_int(r4, 0x1, 0x4, 0x0, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KDGETMODE(r11, 0x4b3b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:08:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r2, r1) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x400454ca, &(0x7f0000000040)={r1}) [ 1507.773457][ T2517] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1507.895167][ T2505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.043395][ T2517] usb 3-1: Using ep0 maxpacket: 8 [ 1508.243429][ T2517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1508.283995][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.423345][ T2517] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db10, bcdDevice=39.d9 [ 1508.432426][ T2517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.441088][ T2517] usb 3-1: Product: syz [ 1508.446100][ T2517] usb 3-1: Manufacturer: syz [ 1508.450707][ T2517] usb 3-1: SerialNumber: syz [ 1508.460294][ T2517] usb 3-1: config 0 descriptor?? [ 1508.745702][ T2517] usb 3-1: USB disconnect, device number 115 16:08:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x6c6ec0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000040)={0x96eb, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="120100031ff66108e90f10dbd939010203ecfebf01090222000100079037090400810000004e0095050600000000000000000000000000af1caaef321fcfa8692e80f3348c700ae9eb6f7f3d030ca479a5fdf4971c27ac8668ed704cf6ca2143f574a401a20d30ce059c333cdfff6bd566c3709532"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1700024a"]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 16:08:24 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x84000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) 16:08:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) io_setup(0x101, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r1, 0x6, 0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r3, r2) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000240)) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) 16:08:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x40049409, &(0x7f0000000040)={r1}) 16:08:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:24 executing program 4: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x10000, 0x25}) 16:08:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) 16:08:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x40086602, &(0x7f0000000040)={r1}) [ 1509.331511][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:24 executing program 0: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0xf0, 0x22240) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 16:08:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) [ 1509.563613][ T2505] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1509.815229][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1509.954475][ T2505] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 1510.083852][ T2505] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1510.093825][ T2505] usb 3-1: can't read configurations, error -61 [ 1510.253270][ T2505] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1510.373463][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.503260][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1510.623831][ T2505] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 1510.743844][ T2505] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1510.751440][ T2505] usb 3-1: can't read configurations, error -61 [ 1510.764859][ T2505] usb usb3-port1: attempt power cycle [ 1510.926204][ T8480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.403441][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.473195][ T2505] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1511.563904][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1511.683647][ T2505] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 1511.813231][ T2505] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1511.820892][ T2505] usb 3-1: can't read configurations, error -61 [ 1511.983158][ T2505] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1512.103612][ T2505] usb 3-1: Using ep0 maxpacket: 8 [ 1512.133313][ T2517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x40087602, &(0x7f0000000040)={r1}) 16:08:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) 16:08:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000000)) 16:08:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 16:08:27 executing program 3: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e73fecae1d7655dc142e3f77f43e2d1164e65a3fbc83f3ff4b17ca5d617f9c4"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x100, 0x40, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x100, 0x9, 0xfffffff6, 0x1000000, r1}) 16:08:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x105000, 0x0) socketpair(0x25, 0x5, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24000090}, 0x4080) dup2(r3, r2) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000240)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @remote}, &(0x7f0000000080)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031ff60008e90f10dbd9390102030109022200010007903f09040000011dea4e0009050600000000000007250100000000"], &(0x7f0000000a40)={0x0, 0x0, 0x17, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1780024a"]}) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f00000000c0)=0x8b, &(0x7f0000000100)=0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r4, 0x10ce, 0x20}, 0xc) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000380)={0x0, @motion_det}) [ 1512.243591][ T2505] usb 3-1: too many configurations: 236, using maximum allowed: 8 16:08:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x40186366, &(0x7f0000000040)={r1}) [ 1512.343165][ T2505] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1512.343185][ T2505] usb 3-1: can't read configurations, error -71 [ 1512.343387][ T2505] usb usb3-port1: unable to enumerate USB device 16:08:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) 16:08:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0xb1ca}) 16:08:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x9, 0x1}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x300, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) 16:08:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x42c, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 1512.443468][T32441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 16:08:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x0, 0x10000, 0x25}) 16:08:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0xb1ca}) 16:08:27 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000040)=0x34) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) 16:08:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = dup2(r2, r1) getsockopt$inet_buf(r3, 0x0, 0x2d, &(0x7f00000000c0)=""/221, &(0x7f0000000000)=0xdd) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000240)) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x61) 16:08:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x11df, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0x4020940d, &(0x7f0000000040)={r1}) [ 1512.612815][ T1593] [drm:drm_calc_timestamping_constants] *ERROR* crtc 33: Can't calculate constants, dotclock = 0! [ 1512.624962][ C0] ------------[ cut here ]------------ [ 1512.630439][ C0] WARNING: CPU: 0 PID: 1593 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x31e/0x3b0 [ 1512.641187][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 1512.647769][ C0] CPU: 0 PID: 1593 Comm: syz-executor.4 Not tainted 5.8.0-rc7-syzkaller #0 [ 1512.656341][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.666428][ C0] Call Trace: [ 1512.669708][ C0] [ 1512.672585][ C0] dump_stack+0x18f/0x20d [ 1512.676915][ C0] panic+0x2e3/0x75c [ 1512.680810][ C0] ? __warn_printk+0xf3/0xf3 [ 1512.685395][ C0] ? printk+0xba/0xed [ 1512.693720][ C0] ? log_store.cold+0x16/0x16 [ 1512.698466][ C0] ? __warn.cold+0x5/0x45 [ 1512.702793][ C0] ? __warn+0xd6/0x1f2 [ 1512.706858][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 16:08:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0xb1ca}) [ 1512.712223][ C0] __warn.cold+0x20/0x45 [ 1512.716459][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 1512.721827][ C0] report_bug+0x1bd/0x210 [ 1512.726155][ C0] handle_bug+0x38/0x90 [ 1512.730305][ C0] ? find_held_lock+0x2d/0x110 [ 1512.735060][ C0] exc_invalid_op+0x13/0x40 [ 1512.739560][ C0] asm_exc_invalid_op+0x12/0x20 [ 1512.744412][ C0] RIP: 0010:vkms_vblank_simulate+0x31e/0x3b0 [ 1512.750384][ C0] Code: 85 9e 00 00 00 48 8b 95 48 02 00 00 4c 89 e1 bf 02 00 00 00 48 c7 c6 00 60 b3 88 e8 4c 2c ad ff e9 e5 fe ff ff e8 02 d8 11 fd <0f> 0b e9 88 fd ff ff e8 a6 3c 51 fd e9 11 fe ff ff 4c 89 ef e8 99 [ 1512.769984][ C0] RSP: 0018:ffffc90000007da8 EFLAGS: 00010046 [ 1512.776041][ C0] RAX: 0000000000010001 RBX: ffff8882187e5888 RCX: ffffffff8461e253 [ 1512.784010][ C0] RDX: ffff8880508c4380 RSI: ffffffff8461e4ce RDI: 0000000000000007 [ 1512.791977][ C0] RBP: 0000000000028104 R08: 0000000000000001 R09: ffff8880508c4c48 [ 1512.799940][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8882187e4d38 [ 1512.807917][ C0] R13: 0000000000000000 R14: ffff8882187e5888 R15: dffffc0000000000 [ 1512.815893][ C0] ? vkms_vblank_simulate+0xa3/0x3b0 [ 1512.821187][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 1512.826553][ C0] ? vkms_vblank_simulate+0x31e/0x3b0 [ 1512.831928][ C0] __hrtimer_run_queues+0x6a9/0xfc0 [ 1512.837125][ C0] ? vkms_disable_vblank+0x20/0x20 [ 1512.842348][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1512.848323][ C0] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 1512.854409][ C0] hrtimer_interrupt+0x32a/0x930 [ 1512.859355][ C0] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 1512.865333][ C0] asm_call_on_stack+0xf/0x20 [ 1512.869996][ C0] [ 1512.872956][ C0] sysvec_apic_timer_interrupt+0xe0/0x120 [ 1512.878685][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1512.884661][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x8c/0xe0 [ 1512.891066][ C0] Code: 48 c7 c0 88 e0 b4 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 37 48 83 3d e3 52 cc 01 00 74 22 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 35 e5 66 f9 65 8b 05 fe 70 19 78 [ 1512.910661][ C0] RSP: 0018:ffffc90008817b00 EFLAGS: 00000282 [ 1512.916721][ C0] RAX: 1ffffffff1369c11 RBX: 0000000000000282 RCX: 0000000000000000 [ 1512.924694][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 1512.932657][ C0] RBP: ffff8882187e4390 R08: 0000000000000000 R09: 0000000000000000 [ 1512.940617][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1512.948582][ C0] R13: 0000000000000282 R14: ffff8882187e4390 R15: ffff8880a19e7950 [ 1512.956562][ C0] drm_vblank_get+0x147/0x1d0 [ 1512.961236][ C0] drm_wait_vblank_ioctl+0x3bd/0x1980 [ 1512.966612][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 1512.972675][ C0] ? lock_downgrade+0x820/0x820 [ 1512.977522][ C0] ? find_held_lock+0x2d/0x110 [ 1512.982279][ C0] ? __might_fault+0x11f/0x1d0 [ 1512.987042][ C0] drm_ioctl_kernel+0x220/0x2e0 [ 1512.991889][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 1512.997949][ C0] ? drm_setversion+0x8a0/0x8a0 [ 1513.002794][ C0] ? __might_fault+0x190/0x1d0 [ 1513.007553][ C0] drm_ioctl+0x4d2/0x96f [ 1513.011795][ C0] ? drm_legacy_modeset_ctl_ioctl+0x480/0x480 [ 1513.017855][ C0] ? drm_version+0x3d0/0x3d0 [ 1513.022439][ C0] ? __might_fault+0x190/0x1d0 [ 1513.027195][ C0] ? _copy_to_user+0x126/0x160 [ 1513.031956][ C0] ? __fget_files+0x294/0x400 [ 1513.036629][ C0] ? drm_version+0x3d0/0x3d0 [ 1513.041214][ C0] ksys_ioctl+0x11a/0x180 [ 1513.045541][ C0] __x64_sys_ioctl+0x6f/0xb0 [ 1513.050264][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1513.055597][ C0] do_syscall_64+0x60/0xe0 [ 1513.060021][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1513.065906][ C0] RIP: 0033:0x45c369 [ 1513.069804][ C0] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1513.089405][ C0] RSP: 002b:00007f1f057f0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1513.097818][ C0] RAX: ffffffffffffffda RBX: 000000000000c200 RCX: 000000000045c369 [ 1513.105777][ C0] RDX: 0000000020000080 RSI: 00000000c018643a RDI: 0000000000000003 [ 1513.113744][ C0] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 1513.121713][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 1513.129680][ C0] R13: 00007fff37e564af R14: 00007f1f057f19c0 R15: 000000000078bf0c [ 1513.139165][ C0] Kernel Offset: disabled [ 1513.143665][ C0] Rebooting in 86400 seconds..