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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xd9010000]}) dup2(r5, r4) [ 2073.454244][ T5266] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2073.744245][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:43:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000500000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:43:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xe0060000]}) dup2(r5, r4) 21:43:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2074.173510][ T5303] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2074.794572][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.165520][ T5200] __nla_validate_parse: 18 callbacks suppressed [ 2075.165530][ T5200] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 21:43:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d4b0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:43:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a3c03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:43:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xe1000000]}) dup2(r5, r4) 21:43:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:43:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000600000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:43:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d6b0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2075.695331][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2075.712084][ T5362] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2075.737514][T26097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.805925][ T5374] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2075.841489][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.850313][ T5367] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2075.867545][ T5372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2075.978177][ T5375] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 21:43:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xf1000040]}) dup2(r5, r4) 21:43:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2076.282795][ T5402] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2076.556740][ T5399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:43:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xf5000040]}) dup2(r5, r4) [ 2076.712028][ T5403] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2076.734597][ T5363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:43:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2076.806030][ T5429] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2076.864836][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:43:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000700000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2076.929183][ T5368] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:43:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xfc010000]}) dup2(r5, r4) [ 2077.201251][ T5464] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2077.914352][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d4c0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d6c0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xff000000]}) dup2(r5, r4) 21:44:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a3d03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000800000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2078.777413][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.949578][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.999358][ T5535] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xff000040]}) dup2(r5, r4) 21:44:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d6d0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2079.791548][ T5570] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2079.984391][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.182643][ T5565] __nla_validate_parse: 12 callbacks suppressed [ 2080.182660][ T5565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2080.290145][ T5569] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2080.303651][ T5572] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xff020000]}) dup2(r5, r4) 21:44:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000900000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2080.379568][ T5536] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2080.459565][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2080.564411][ T5599] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2080.925851][ T5605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2081.022956][ T5613] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2081.030452][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2081.043911][ T5616] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2081.097909][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2081.111923][ T5574] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2081.817389][T26097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.064376][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d4d0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a3e03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xff080000]}) dup2(r5, r4) 21:44:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000a00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:05 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d6e0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2082.298987][ T5672] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06, 0x0, 0x0, 0xffff8000]}) dup2(r5, r4) [ 2082.537773][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.682900][ T5715] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000b00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2083.097669][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000000)) r4 = dup3(r0, r1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x3, 0x7, 0x11}, {0x8, 0x5, 0x5, 0xfff}]}) write$binfmt_aout(r5, &(0x7f0000000980)={{0x108, 0x6, 0x1, 0x353, 0x1eb, 0x7, 0x96, 0x7}, "df7ee7", [[], [], [], [], [], [], [], []]}, 0x823) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0x8, 0xc76}) dup2(r4, r3) 21:44:06 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d6f0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2083.410330][ T5751] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2084.144267][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.857426][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d4e0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0xa591) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x88d, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r8, 0xc0045004, &(0x7f0000000000)) dup2(r6, r3) 21:44:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4103000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000c00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2085.177573][ T5822] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2085.205269][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) r6 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r6, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r7 = accept4$phonet_pipe(r5, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)={r7}) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) [ 2085.599174][ T5846] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2085.638916][ T5824] __nla_validate_parse: 19 callbacks suppressed [ 2085.638926][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2085.825928][ T5828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2085.884954][ T5829] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2085.906129][ T5834] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/166) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r6, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f00000001c0)="d9230628f738a230c5923622952658b7a76e92ee48961cdb66fc93d5b527eacddfff38845dfee83e7b5475bb4a2638a0e4b877952adab1eec69d171f785cea058ac410f752ddb8b82736724d71accaf1a7a3b9d7eb2e17fb45036ab24a8243b3cdeb9d1a046d10a41e2722e116d4e8833216e654bce610801f915dc62c995e6bbb5351ef1adadafc9d119895b75c01a20460eb83ba1e8a72f109b772108fb80a8959f98e0833049e59328f57408cece3208b9705b5cf5b8c24d8f965d6f45642650e885253", 0xc5}) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r7, r4) [ 2085.998129][ T5835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2086.015920][ T5831] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:44:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d700a0003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2086.126953][ T5879] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2086.164066][ T5872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2086.255236][ T5888] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2086.275939][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000000)=0x4) [ 2086.776833][ T5879] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000e00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2086.910511][ T5837] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2087.041912][ T5919] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2087.348543][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.898188][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.907404][T11368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.934100][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.947686][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d4f0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4203000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="258f3129b7583c522e9a1e7227c276b6efe96a363aaa5d9a91fe952024e84e7bc09bcc5ee2d4cff3d9c803ce18b8fbafecdbcd6212", 0x35, 0x100000001}], 0x1000080, &(0x7f0000000180)='/dev/kvm\x00') ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x20040000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r8, r4) 21:44:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000000f00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2088.377971][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2088.475624][ T5985] ceph: No path or : separator in source [ 2088.550862][ T5985] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d710a0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) creat(&(0x7f0000000080)='./file0\x00', 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x380000c, 0x10012, r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x779) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x280401, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) [ 2089.299956][ T6025] warn_alloc: 1 callbacks suppressed [ 2089.299985][ T6025] syz-executor.5: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2089.331313][ T6025] CPU: 0 PID: 6025 Comm: syz-executor.5 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2089.341126][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2089.351182][ T6025] Call Trace: [ 2089.354487][ T6025] dump_stack+0x18f/0x20d [ 2089.358831][ T6025] warn_alloc.cold+0x87/0x17a [ 2089.363521][ T6025] ? zone_watermark_ok_safe+0x260/0x260 [ 2089.369089][ T6025] ? wait_for_completion+0x260/0x260 [ 2089.374397][ T6025] __alloc_pages_slowpath.constprop.0+0x2197/0x2780 [ 2089.381034][ T6025] ? warn_alloc+0x120/0x120 [ 2089.385546][ T6025] ? fs_reclaim_release+0x94/0xf0 [ 2089.390629][ T6025] ? lock_is_held_type+0xb0/0xe0 [ 2089.395571][ T6025] ? find_held_lock+0x2d/0x110 [ 2089.400345][ T6025] __alloc_pages_nodemask+0x5a3/0x700 [ 2089.405723][ T6025] ? __zone_watermark_ok+0x3f0/0x3f0 [ 2089.411013][ T6025] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2089.417773][ T6025] ? lock_is_held_type+0xb0/0xe0 [ 2089.422719][ T6025] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2089.428284][ T6025] ? __alloc_pages_nodemask+0x5c5/0x700 [ 2089.433831][ T6025] alloc_pages_current+0x187/0x280 [ 2089.438951][ T6025] alloc_mmu_pages+0x7f/0x170 [ 2089.443646][ T6025] kvm_mmu_create+0x3cb/0x560 [ 2089.448325][ T6025] kvm_arch_vcpu_create+0x16d/0xb70 [ 2089.453540][ T6025] kvm_vm_ioctl+0x1547/0x23c0 [ 2089.453562][ T6025] ? lock_downgrade+0x820/0x820 [ 2089.453579][ T6025] ? kvm_unregister_device_ops+0x60/0x60 [ 2089.453598][ T6025] ? trace_hardirqs_on+0x5f/0x220 [ 2089.473710][ T6025] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2089.478838][ T6025] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2089.484522][ T6025] ? tomoyo_execute_permission+0x470/0x470 [ 2089.490332][ T6025] ? __might_fault+0x11f/0x1d0 [ 2089.495099][ T6025] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2089.500988][ T6025] ? do_vfs_ioctl+0x27d/0x1090 [ 2089.505747][ T6025] ? generic_block_fiemap+0x60/0x60 [ 2089.510946][ T6025] ? __might_fault+0x190/0x1d0 [ 2089.515708][ T6025] ? _copy_to_user+0x126/0x160 [ 2089.520471][ T6025] ? __fget_files+0x294/0x400 [ 2089.525156][ T6025] ? kvm_unregister_device_ops+0x60/0x60 [ 2089.536984][ T6025] ksys_ioctl+0x11a/0x180 [ 2089.541315][ T6025] __x64_sys_ioctl+0x6f/0xb0 [ 2089.545901][ T6025] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2089.551013][ T6025] do_syscall_64+0x60/0xe0 [ 2089.555428][ T6025] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2089.561322][ T6025] RIP: 0033:0x45cb29 [ 2089.565216][ T6025] Code: Bad RIP value. [ 2089.569288][ T6025] RSP: 002b:00007f7038bdbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2089.577700][ T6025] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29 [ 2089.585668][ T6025] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2089.593638][ T6025] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2089.601617][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2089.609595][ T6025] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f7038bdc6d4 [ 2089.666586][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2089.711852][ T6025] Mem-Info: [ 2089.715287][ T6025] active_anon:138062 inactive_anon:33295 isolated_anon:0 [ 2089.715287][ T6025] active_file:5832 inactive_file:10536 isolated_file:0 [ 2089.715287][ T6025] unevictable:0 dirty:21 writeback:0 [ 2089.715287][ T6025] slab_reclaimable:84713 slab_unreclaimable:307175 [ 2089.715287][ T6025] mapped:60170 shmem:12223 pagetables:2218 bounce:0 [ 2089.715287][ T6025] free:923485 free_pcp:959 free_cma:0 [ 2089.758001][ T6025] Node 0 active_anon:536836kB inactive_anon:123640kB active_file:24kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221136kB dirty:20kB writeback:0kB shmem:39764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB kernel_stack:9312kB all_unreclaimable? yes [ 2089.876543][ T6025] Node 1 active_anon:16012kB inactive_anon:9540kB active_file:23304kB inactive_file:42136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19544kB dirty:64kB writeback:0kB shmem:9128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 6144kB writeback_tmp:0kB kernel_stack:1152kB all_unreclaimable? no [ 2090.051749][ T6025] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2090.137868][ T6025] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2090.143633][ T6025] Node 0 DMA32 free:57348kB min:54348kB low:63324kB high:72300kB reserved_highatomic:2048KB active_anon:536832kB inactive_anon:123640kB active_file:24kB inactive_file:8kB unevictable:0kB writepending:20kB present:3129332kB managed:2578204kB mlocked:0kB pagetables:7456kB bounce:0kB free_pcp:2948kB local_pcp:1500kB free_cma:0kB [ 2090.278833][ T6025] lowmem_reserve[]: 0 0 0 0 0 [ 2090.289748][ T6025] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2090.319749][ T6025] lowmem_reserve[]: 0 0 0 0 0 [ 2090.324740][ T6025] Node 1 Normal free:3625668kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:15312kB inactive_anon:9540kB active_file:23304kB inactive_file:42136kB unevictable:0kB writepending:64kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:1268kB bounce:0kB free_pcp:2420kB local_pcp:1452kB free_cma:0kB 21:44:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000001000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4303000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d600a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) [ 2090.567150][ T6025] lowmem_reserve[]: 0 0 0 0 0 [ 2090.571872][ T6025] Node 0 DMA: 2*4kB (ME) 36*8kB (UM) 39*16kB (UM) 36*32kB (UM) 2*64kB (ME) 1*128kB (M) 3*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10264kB [ 2090.657213][ T6025] Node 0 DMA32: 3049*4kB (UMH) 2114*8kB (UMH) 1127*16kB (UMH) 278*32kB (UME) 40*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58596kB [ 2090.726273][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.746085][ T6025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2090.770678][ T649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.780957][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.791035][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.819881][ T6025] Node 1 Normal: 48*4kB (UME) 123*8kB (UME) 810*16kB (UME) 515*32kB (UME) 281*64kB (UE) 103*128kB (U) 37*256kB (UE) 22*512kB (UM) 9*1024kB (UM) 3*2048kB (U) 861*4096kB (M) = 3624536kB [ 2090.875789][ T6025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2090.912286][ T6025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2090.945841][ T6025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2090.993460][ T6025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2091.017466][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.023940][ T6025] 23280 total pagecache pages [ 2091.054758][ T6025] 0 pages in swap cache [ 2091.059358][ T6025] Swap cache stats: add 0, delete 0, find 0/0 [ 2091.065423][ T6025] Free swap = 0kB [ 2091.093357][ T6025] Total swap = 0kB [ 2091.113410][ T6025] 1965979 pages RAM [ 2091.118341][ T6025] 0 pages HighMem/MovableOnly [ 2091.123021][ T6025] 349901 pages reserved [ 2091.154310][ T6025] 0 pages cma reserved 21:44:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) dup2(r5, r4) [ 2091.230603][ T6075] __nla_validate_parse: 18 callbacks suppressed [ 2091.230614][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2091.327304][ T6079] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2091.336922][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2091.430184][ T6086] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2091.460328][ T6111] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2091.498621][ T6082] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2091.508537][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2091.622769][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d720a0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) prctl$PR_GET_SECUREBITS(0x1b) dup2(r5, r4) 21:44:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000001100000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2091.836462][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.902880][ T6147] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2092.138048][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2092.287374][ T6133] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2092.314525][ T6140] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='netpci0\x00') r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r4) [ 2092.353480][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2092.526933][ T6173] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4403000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2092.857865][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2093.203848][ T6192] qfq: no options [ 2093.209813][ T6184] qfq: no options 21:44:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000001200000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:16 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="44000000530265398fa5181c90e96abfbd6764c88193db12b3a0f3278f0b1d9bc7db0c0c241d547c4444ccbc1c3b81f7d68a55b1143e96b41673e7dac12903e14a4c47334e0413a6a6cf9023223b5258cb53771827785d923e368a9fef7fa5d853f38c9e76f210", @ANYRES16=r4, @ANYBLOB="000426bd7000fedbdf2500000000200001800c0007003500000000000000edff0700090000000800f1ffa0000000080004000700000008000500c37f0000894461dbd01dfe480f02c5c3e9872b268a8f6b8fcb0cba8c3db44f0c090a4d8330b103299eb12d6a744306f75ef2fb66078b5f712366e421b921e56f5a0229ea05223ccd82d0ba2f7326ea54718dda4de74be37d6b532130560388fc90867311140617f88687948cdd027c5c95d5305d88ea45ca9e6cb54cae3d73310cfa31833c1d7639b43052963b0abc8e46cc6c00a435e41612f699a888b549a305cdd187cef960bbc2a66b"], 0x44}, 0x1, 0x0, 0x0, 0x20040014}, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r6 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r6, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) io_submit(0x0, 0x8, &(0x7f0000001b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xe000, r3, &(0x7f00000001c0)="3d1d2358b2293726096ba07fa463b5db80ed5a39da59df2d3df2a45dd14abe1b54df2f79d9e28da09bdd990d8fba752d7374712c70dff2a640333e74947d50415ac80684cdf8d6cbe07770f5f9e961961371bbb7780fd26c00a914ecbcc0978b2fa9a1778b67917e8fb0e25087fdd33b9b8126b65d6881988bc939d050193f7d5ebba248b413e1e6ff233363ebc0cd77582b4b369836ff677dd65a9b6dc0f0f7edab2eb344550c56c8e75e126b0158c5b8362d4cb26ed4f007fd26ce18fe53594b1648cbd03a33784f31bd419c8c397b3877cbd263", 0xd5, 0x20, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000300)="8be4f184663cf34381948aa7cb70ade1f870ce7a55e6189f28c2dfcccd1b", 0x1e, 0x3, 0x0, 0x3, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x7fff, r5, &(0x7f0000000380)="6cc4ffcd14a30bc70878220673ccf16a8d12b07165602f38d44de039e6cad3d63d28e979e717734f1528eaeb0db84e3b1e6fbfefc5d1", 0x36, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0xbd45, 0xffffffffffffffff, &(0x7f0000000400)="5cbbe4afda23927d02b8413f5bc23d5339746d410ecec16fbffb0525ab8bac6d7173f4dde65fe8844d340ab6d32ab48c84bf419cc55308421edc3ba855d377898d5e683a1b6c116e318daf332635ab3e15397e73112c0fd23c9aea8d59e9a5a83210a3fac4ac83288885e4b61d59cd72c5698a03483732d098e1eb17235be92545099cf818", 0x85, 0x5, 0x0, 0x7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x6, r5, &(0x7f0000000500), 0x0, 0x5, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f0000000980)="729fc7cfc4db1a3cc0a6e03aba3667776137980193a54a6756acc849267ecf5104a61954878a30ef56935e75dc", 0x2d, 0x4, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000a00)="68483ecd5467889288117cbafec1b413c22bde87ae0d963fccb44caa6ca7470feb76c6aed5400bb2d0f498587464c19bc0fd7a03c892cfec8516c2e8a13d7d8b755d6901bbd67365d79a6314988b4ec143e2c85a78fb4007516c70e3d2fbbd378b", 0x61, 0x13de, 0x0, 0x1}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x2, 0x401, r6, &(0x7f0000000ac0)="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", 0x1000, 0x8001, 0x0, 0x2, r8}]) dup2(r5, r3) [ 2093.907507][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.011368][ T6218] qfq: no options [ 2094.054596][ T6227] qfq: no options 21:44:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d680a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000061200000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2094.716356][ T6263] qfq: no options [ 2094.779888][ T6266] qfq: no options 21:44:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d740a0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x0, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2094.944329][ T8101] net_ratelimit: 1 callbacks suppressed [ 2094.944337][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000001300000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x0, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4503000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001640), 0x4) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r3 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001640), 0xff5f) r4 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80142, 0x30) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x4e04, 0xfffffffffffff04b, 0x2, 0x135]}) [ 2095.804482][ T6336] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2095.893010][ T6336] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:18 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000001000000b6525f0e0f789c5f000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 2095.984854][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.102080][ T6352] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 21:44:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x0, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2096.321832][ T6324] __nla_validate_parse: 25 callbacks suppressed [ 2096.321841][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2096.344276][ T6297] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2096.430402][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2096.618867][ T649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.628570][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.642690][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r7, 0x3}, 0x10) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) [ 2096.985911][ T6376] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2097.012903][ T6392] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2097.097440][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2097.098472][ T6265] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2097.669431][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d6c0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000003f00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d750a0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x40) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r7, r6) [ 2097.750779][ T6335] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:44:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r5, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r8) [ 2098.242045][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2098.367484][ T6434] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2098.384427][ T6436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2098.474264][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4603000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9e0000, 0x6d7, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a091b, 0x178, [], @string=&(0x7f0000000000)=0x5}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) readahead(r7, 0xce6, 0x801) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r10 = dup3(r0, r6, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r9, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r10, r9) [ 2098.707390][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000004000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d760a0003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2099.754496][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.137653][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.779098][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d740a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r5}}}], 0x20}, 0x0) r7 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x3}, [{0x2, 0x3}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0x4, r5}, {0x8, 0x6, r7}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r8) 21:44:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:44:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000005400000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4703000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2101.630029][ T6584] __nla_validate_parse: 11 callbacks suppressed [ 2101.630040][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2101.730239][ T6583] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2101.748269][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2101.804676][ T6592] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2101.818433][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2101.826573][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2101.925980][ T6589] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2101.934076][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x78) dup2(r5, r8) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r4) [ 2102.037878][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d7a0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000006000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2102.159295][ T6631] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2102.278726][ T6647] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2102.388114][ T649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.400677][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.410353][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.814941][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000000)=[0xd4], 0x1, 0x1, 0xffffffff, 0x3807, 0x4, 0x3, 0x2, {0x59, 0x40, 0x400, 0x3, 0x101, 0x4a, 0xfffb, 0x1000, 0xfff, 0x4, 0x20, 0x2627, 0x9, 0x8000, "9d52fbbe2fa3d4de064640b8acc278c32306746f50b47a4af0e36f85f4434df3"}}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r8, &(0x7f0000000180)="f785fbba28a5118b6eddee496e2635021083e133b9deb929139811bfdd96c72bc3372bc6903450a48c41188551719edf99789cf2a1c0d89e7fb7c421ae9439e703d4b9a970fbf657e1ef347e438cda33afadb9f7de8f181b9176451c56ba77193e419d1fb503aa1b769e2e13a8055101e5ee8f5673c54c9810a127f9976ce9049ce2d8ff1cea5a71a8a270452dd172a305d972c7d45e4fe5e79326f828aadd114e7b008af5316d06f8b1401e8522d24f1642ed3d16e189873a52d73b89158764dcd81c2481639f2cfde3ddfd9c89f1375db8f8175ff10ac68c0e8750999e99101c84aa9239144e5be155996af535fb8bc23c8fd7948600ebe8", 0xf9) dup2(r5, r4) [ 2102.953863][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2103.014515][ T6660] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) [ 2103.125222][ T6676] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2103.178304][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2103.427361][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d7a0a0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4803000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={r8}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000000)={r8, 0xfa0}, 0x8) dup2(r5, r4) 21:44:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000586500000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) [ 2104.491542][ T6757] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2104.510817][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) 21:44:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000c0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f07b8b4000f00d8660f089adb006a000f01c864aa2a6e97f226f3670f4713b80a010f00d804c2", 0x27}], 0x1, 0x20, &(0x7f00000001c0)=[@dstype3={0x7, 0x2}, @cr0={0x0, 0x8000000a}], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f0000000100)={0x1, 0x0, 'client0\x00', 0xffffffff80000006, "139daf888e7a9362", "897d23d8123f251ea3cffad6e43b5b68c967b076a309804913601e964754f809", 0x8, 0x1797}) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r6) 21:44:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000000008100000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2105.577694][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x0, 0x0) 21:44:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@private, @in6=@initdev}}, {{@in6=@loopback}}}, &(0x7f0000000000)=0xe8) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) 21:44:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00000000ffffa88800000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2105.933457][ T6851] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2106.221247][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.628033][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.093630][ T6753] __nla_validate_parse: 21 callbacks suppressed [ 2107.093642][ T6753] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 21:44:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000c0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4903000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000100)={0x8, 0x0, [{0xc0000001, 0x2, 0x2, 0x6, 0xaf}, {0xc0000001, 0x80000000, 0x3, 0x400, 0x39}, {0x80000007, 0x1, 0x401, 0x5, 0x7}, {0xc0000000, 0x9, 0x6a, 0x9, 0x1f}, {0x80000008, 0x8, 0x6, 0x2ba4, 0x8}, {0x0, 0x7ff, 0x1f, 0x81}, {0x80000001, 0x5, 0x4, 0x772, 0x3}, {0x40000002, 0x7, 0x2, 0x5, 0x800}]}) dup2(r5, r4) 21:44:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x0, 0x0) 21:44:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00000000fffffffc00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000d0003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2107.657552][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.660866][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2107.751928][ T6940] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2107.783184][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000100)={[], 0x6, 0x1, 0x4, 0x0, 0x20, 0x3000, 0x100006, [], 0x7}) dup2(r5, r4) [ 2108.176048][ T6966] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x0, 0x0) [ 2108.340819][ T6937] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2108.366398][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2108.492942][ T6928] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:44:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000007fffffff00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000e0003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2108.550470][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2108.643043][ T6991] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2108.707252][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) [ 2109.106598][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2109.235213][ T6941] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2109.258024][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4a03000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2109.737466][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000d0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00000000ffffffff00000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) [ 2110.777363][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 21:44:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00140003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:34 executing program 5: munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r8, r7) [ 2111.337645][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xff, 0x2, 0x80, 0x3f, 0x0, 0x174, 0x6000c, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x2, @perf_bp={&(0x7f0000000080)}, 0x802, 0xfffffffeffffffff, 0x6, 0x4, 0xc4, 0xffff, 0x7}, 0xffffffffffffffff, 0x3, r5, 0x8) r7 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r7, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) sendfile(r6, r7, 0x0, 0x9) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) [ 2111.817427][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000200"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 21:44:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r4, r3) 21:44:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4b03000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2112.298499][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.538630][ T7160] __nla_validate_parse: 13 callbacks suppressed [ 2112.538641][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2112.724386][ T7165] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 21:44:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) [ 2112.830679][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2112.848734][ T7114] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2112.868918][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.970907][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2113.454822][ T7205] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2113.897910][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.025897][ T7173] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:44:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000e0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000100)=""/74) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r6) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3000, 0x30, 0x5, 0x9}, &(0x7f0000000180)=0x18) 21:44:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000300"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 21:44:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00250003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x204001, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x3, 0x576, 0x7, 0x5, 0x41, 0xd5, 0x8, 0x16, 0x20, 0x9, 0x4, 0x80, 0xea}, {0x5, 0xf38, 0x7f, 0x80, 0x13, 0x3, 0x0, 0x0, 0x2, 0x65, 0x32, 0x7f, 0x2}, {0x1, 0x611, 0x5, 0x7, 0x6, 0x0, 0x8, 0x0, 0x2f, 0x24, 0x20, 0x5, 0x401}], 0x3}) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080), 0x8) dup2(r5, r4) [ 2114.502616][ T7267] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2114.772081][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2114.860246][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2114.893739][ T7250] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2114.937430][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000001440)={0x1, 0x0, 0x1000, 0x45, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 21:44:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x60b1, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000100)={{0x3, 0x0, 0x85, 0x0, 0x2}, 0xffff8000, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x4ae, 0x2, 0x63, 0x8000}) dup2(r5, r4) 21:44:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4c03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000001440)={0x1, 0x1, 0x1000, 0x45, 0x0, 0x0, 0x0, 0x0}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000001c0)={{0x101}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) read(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/arp\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000182, 0x10400003) [ 2115.329073][ T7312] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2115.347247][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:38 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000001880)=""/4101, 0x1005}], 0x1, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0}) syz_open_dev$usbfs(0x0, 0x40000000909, 0x0) [ 2115.977606][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000400"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2117.024833][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) r3 = socket$kcm(0x11, 0x8000000000000003, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000980)=""/4096, &(0x7f0000000300)=0x1000) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x43, "e0cbca494aad6d079d52c0ac7db505cdaa4d435d7238d465e01bcfdbc3b78fc3697c291e6da35e5f98cfb1f0e1a303e8e7fb7f7eae786f8c2d5767bcb6b374a2f60270"}, &(0x7f00000002c0)=0x67) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r7 = dup2(r6, r5) socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2b000000e28260c53afe28a11cb461559127dccd9f4ad167e1b641dddd7ec4b60670b7c40ee8fbdc098757ce1a63cbcce3f4e625c6e9917abdce8cbc29de5b8b59a3fd0209792ffdbae6bc82890169", @ANYRESDEC=r5, @ANYRES32], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000001980)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYBLOB="00000000df250f0000000800010070a5690011000200302930303a30303a31302e30000008000b0004000000caff1100f1000000080001007063690011000200303030303a30303a31302e300000000008009b349b532c4c6d0b0005000100060011000300000000000000d5166c9b0d7b25c329d00a6f52a11964a45233f02b9352d606cf51cf7c096fe7c231bd3b8f10376648f7ad18c69ea6e9e48f61e3b457f6d4747f074d3361e7bf4108ac00"/187], 0x6c}, 0x1, 0x0, 0x0, 0x4048094}, 0x44000) 21:44:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00280003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d3c0e0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='udf\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 21:44:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000500"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:40 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x12) pidfd_open(r0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$bsg(0xffffffffffffff9c, 0x0, 0x20002, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21:44:40 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$cont(0x18, 0x0, 0x0, 0x0) pidfd_open(r0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat$bsg(0xffffffffffffff9c, 0x0, 0x20002, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), 0x4) [ 2117.755507][ T7408] 9pnet: Insufficient options for proto=fd [ 2117.773898][ T7405] 9pnet: Insufficient options for proto=fd [ 2117.919701][ T7399] __nla_validate_parse: 7 callbacks suppressed [ 2117.919714][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2118.071354][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.129443][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2118.146497][ T7389] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:44:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4d03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:41 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2118.378780][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:41 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:44:42 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) [ 2119.100144][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000600"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2119.232300][ T7398] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2119.306163][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2119.983104][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2120.015339][ T7450] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:44:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r7, r6) 21:44:43 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2120.138393][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.372065][ T7523] syz-executor.5: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2120.434696][ T7523] CPU: 0 PID: 7523 Comm: syz-executor.5 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2120.444530][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2120.454585][ T7523] Call Trace: [ 2120.457892][ T7523] dump_stack+0x18f/0x20d [ 2120.462268][ T7523] warn_alloc.cold+0x87/0x17a [ 2120.466960][ T7523] ? zone_watermark_ok_safe+0x260/0x260 [ 2120.472527][ T7523] ? wait_for_completion+0x260/0x260 [ 2120.477833][ T7523] __alloc_pages_slowpath.constprop.0+0x2197/0x2780 [ 2120.484480][ T7523] ? warn_alloc+0x120/0x120 [ 2120.489025][ T7523] ? fs_reclaim_release+0x94/0xf0 [ 2120.494070][ T7523] ? lock_is_held_type+0xb0/0xe0 [ 2120.499013][ T7523] ? find_held_lock+0x2d/0x110 [ 2120.503795][ T7523] __alloc_pages_nodemask+0x5a3/0x700 [ 2120.509175][ T7523] ? __zone_watermark_ok+0x3f0/0x3f0 [ 2120.514475][ T7523] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2120.521239][ T7523] ? lock_is_held_type+0xb0/0xe0 [ 2120.526241][ T7523] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2120.531861][ T7523] ? __alloc_pages_nodemask+0x5c5/0x700 [ 2120.537419][ T7523] alloc_pages_current+0x187/0x280 [ 2120.542537][ T7523] alloc_mmu_pages+0x7f/0x170 [ 2120.547216][ T7523] kvm_mmu_create+0x3cb/0x560 [ 2120.551897][ T7523] kvm_arch_vcpu_create+0x16d/0xb70 [ 2120.557121][ T7523] kvm_vm_ioctl+0x1547/0x23c0 [ 2120.561804][ T7523] ? lock_downgrade+0x820/0x820 [ 2120.566659][ T7523] ? kvm_unregister_device_ops+0x60/0x60 [ 2120.572294][ T7523] ? trace_hardirqs_on+0x5f/0x220 [ 2120.577321][ T7523] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2120.582444][ T7523] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2120.588080][ T7523] ? tomoyo_execute_permission+0x470/0x470 [ 2120.593914][ T7523] ? __might_fault+0x11f/0x1d0 [ 2120.598689][ T7523] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2120.604591][ T7523] ? do_vfs_ioctl+0x27d/0x1090 [ 2120.609359][ T7523] ? generic_block_fiemap+0x60/0x60 [ 2120.614581][ T7523] ? __might_fault+0x190/0x1d0 [ 2120.619349][ T7523] ? _copy_to_user+0x126/0x160 [ 2120.624118][ T7523] ? __fget_files+0x294/0x400 [ 2120.628814][ T7523] ? kvm_unregister_device_ops+0x60/0x60 [ 2120.634453][ T7523] ksys_ioctl+0x11a/0x180 [ 2120.638786][ T7523] __x64_sys_ioctl+0x6f/0xb0 [ 2120.643377][ T7523] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2120.648530][ T7523] do_syscall_64+0x60/0xe0 [ 2120.652951][ T7523] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2120.658842][ T7523] RIP: 0033:0x45cb29 [ 2120.662725][ T7523] Code: Bad RIP value. [ 2120.666784][ T7523] RSP: 002b:00007f7038bbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2120.675194][ T7523] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29 [ 2120.683158][ T7523] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2120.691304][ T7523] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2120.699294][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2120.707282][ T7523] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f7038bbb6d4 [ 2120.855077][ T7523] Mem-Info: [ 2120.865274][ T7523] active_anon:143957 inactive_anon:33336 isolated_anon:0 [ 2120.865274][ T7523] active_file:5830 inactive_file:10587 isolated_file:0 [ 2120.865274][ T7523] unevictable:0 dirty:21 writeback:0 [ 2120.865274][ T7523] slab_reclaimable:85778 slab_unreclaimable:310876 [ 2120.865274][ T7523] mapped:60186 shmem:12305 pagetables:2219 bounce:0 [ 2120.865274][ T7523] free:911426 free_pcp:1098 free_cma:0 [ 2120.920436][ T7523] Node 0 active_anon:539968kB inactive_anon:123648kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221256kB dirty:8kB writeback:0kB shmem:39784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB kernel_stack:9248kB all_unreclaimable? yes [ 2120.952195][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.962818][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.972854][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.982020][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.000469][ T7523] Node 1 active_anon:35860kB inactive_anon:9696kB active_file:23312kB inactive_file:42344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19488kB dirty:76kB writeback:0kB shmem:9436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 6144kB writeback_tmp:0kB kernel_stack:672kB all_unreclaimable? no [ 2121.036239][ T7523] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2121.072835][ T7523] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2121.079517][ T7523] Node 0 DMA32 free:70880kB min:68684kB low:77660kB high:86636kB reserved_highatomic:2048KB active_anon:539964kB inactive_anon:123648kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2578204kB mlocked:0kB pagetables:7456kB bounce:0kB free_pcp:1372kB local_pcp:1064kB free_cma:0kB [ 2121.148476][ T7400] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2121.156492][ T7523] lowmem_reserve[]: 0 0 0 0 0 [ 2121.183041][ T7523] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2121.210834][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.254016][ T7523] lowmem_reserve[]: 0 0 0 0 0 [ 2121.273202][ T7523] Node 1 Normal free:3565176kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:35760kB inactive_anon:9696kB active_file:23312kB inactive_file:42344kB unevictable:0kB writepending:76kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:1272kB bounce:0kB free_pcp:2448kB local_pcp:1068kB free_cma:0kB [ 2121.363424][ T7523] lowmem_reserve[]: 0 0 0 0 0 [ 2121.369247][ T7523] Node 0 DMA: 2*4kB (ME) 36*8kB (UM) 39*16kB (UM) 36*32kB (UM) 2*64kB (ME) 1*128kB (M) 3*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10264kB [ 2121.412723][ T7523] Node 0 DMA32: 1407*4kB (UMH) 2503*8kB (UMEH) 1703*16kB (UMEH) 484*32kB (UME) 31*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 70372kB [ 2121.432384][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.480395][ T7523] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2121.545126][ T7523] Node 1 Normal: 109*4kB (UM) 58*8kB (UM) 32*16kB (ME) 36*32kB (UM) 180*64kB (UM) 116*128kB (UME) 41*256kB (UM) 25*512kB (UME) 9*1024kB (UME) 5*2048kB (UME) 853*4096kB (M) = 3565572kB [ 2121.581832][ T7523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2121.595292][ T7523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2121.612300][ T7523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2121.626221][ T7523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2121.642867][ T7523] 23400 total pagecache pages [ 2121.650450][ T7523] 0 pages in swap cache [ 2121.654712][ T7523] Swap cache stats: add 0, delete 0, find 0/0 [ 2121.669795][ T7523] Free swap = 0kB [ 2121.673640][ T7523] Total swap = 0kB [ 2121.682492][ T7523] 1965979 pages RAM [ 2121.686432][ T7523] 0 pages HighMem/MovableOnly [ 2121.695826][ T7523] 349901 pages reserved [ 2121.704378][ T7523] 0 pages cma reserved 21:44:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d3c0f0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:44 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00370003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:44 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:44:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000700"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4e03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r4, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) bind(r4, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x84, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x58, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x84}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) [ 2121.973595][ T7561] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2122.010148][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:45 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2122.144979][ T7563] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2122.227666][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.256182][ T7563] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:45 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:44:45 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:44:45 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x8, 0x12) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup3(r7, 0xffffffffffffffff, 0x80000) dup2(r7, r4) 21:44:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000800"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:46 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) [ 2123.032873][ T7562] __nla_validate_parse: 1 callbacks suppressed [ 2123.032884][ T7562] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2123.168592][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2123.268167][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.772866][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2123.863413][ T7579] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2124.297407][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2124.457439][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2124.543108][ T7571] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 21:44:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d3c100003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:47 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d003c0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x8000, 0x2) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="d13682de84748446f0b99843ca51ecfda81b2ba229870372cfaf084f1ae93f9a734896722bca1d63b529b30300d973a0db3535fd0c2414289119b67ffa3aec9dc6d2d44400b6a2ca16175f9e1310ef1dd69f53379032bc2a30aaaf37a43e30d5c4cab5d575567324d95ad9e28b1dbedc7168265b3e55e4e000d39cb8688c297fa71b58dc3d37a06a146f8ffba664fc5af56cbca24181cfa30d3c2d00b760249d1885c783f85f0dcc16203281b6b466cb69a3e0f225409f772785591dd772a899e3b0608e89282a61ed4fd39bb4ecfdc1", 0xd0, 0xfffffffffffffff9) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) 21:44:47 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:44:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000900"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a4f03000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2125.034315][ T7697] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2125.045008][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:48 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2125.146889][ T7715] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2125.337490][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000000)={0x3ff}, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r4) 21:44:48 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2125.543611][ T7736] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:48 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2125.874266][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) [ 2126.015694][ T7699] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:44:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000a00"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2126.378180][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.656218][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2126.698130][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.708024][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.718889][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.418362][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.499227][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00140003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:51 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {0xffffffffffffffff, 0x401}], 0x2, 0x0) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:44:51 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d3e4c0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r6 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r6, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x1) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000337"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x5, 0xaa, {0xaa, 0xa, "51fa392e95fb9cb637295137e42be49b4669e934061ca39a426dc82a8cf2de663380a2884fd97599c1dd8c805417b7ebd3518a5c69cf1227ecce18e9c4e5f66abd49ad90c3c4076a64c67ed3947cfdaa6144d7e1785dc5b671dbdc4f5fabd83d90ac8d0f34be5c43fa0184870ca21bf18cac39278ff96c7e44fb34f072889b7f1f446d15568f2762846d8d42a06122d97bd604e83ff7c2b3264849b3ebadc909f9ba272a56bffb40"}}, &(0x7f0000000080)={0x0, 0x3, 0x8, @string={0x8, 0x3, "58405d24c723"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0x9, 0xe7, "7f57476909465096d51d556016c89d70a9144dbbd7958cb99d047fe10b9f06ac8d2de30d2ea11d0f96efb19068e0def878071897162fc03d28927e5e8df6b21100dd659c056a8ae876f2c67d7a168ad6574322f58525b9d45b8db2f5a084ce4a19863c53dd04261472b5892ac013fa4b8d4794697db7674e5cfd343171a904ae6349a0d4c1abbfe568752a37bb080153ac9d2178db85b0b0eb8b0157376ac199ad6829f1a3719374de37979fc498c372dcd7d93cb44ea2728eeb23f7f0cda6e644f121395c0a0d2a870f4269d1594741a53f5b0fc88c5f51c686d5c4c3064eff94036aba12fa24"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x2, "d3b4"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "cfe8"}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'I'}, &(0x7f0000000480)={0x20, 0x84, 0x4, "c953dec5"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "58c220"}}) dup2(r5, r4) 21:44:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000b00"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a5003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2128.109420][ T7836] __nla_validate_parse: 3 callbacks suppressed [ 2128.109429][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2128.123365][ T7840] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2128.214359][ T7839] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:51 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {0xffffffffffffffff, 0x401}], 0x2, 0x0) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2128.458549][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:51 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {0xffffffffffffffff, 0x401}], 0x2, 0x0) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:44:51 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r1, 0x242a}, {r1, 0x401}], 0x2, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) write$binfmt_misc(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2128.828077][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0xae, 0x0, 0xa, 0x80, 0x2, 0x2, 0xc1, 0x2, 0x0, 0x0, 0x9, 0x8, 0x7f, 0x81, 0x1f, 0x9}}) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r8) 21:44:52 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r1, 0x242a}, {r1, 0x401}], 0x2, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) write$binfmt_misc(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2129.074068][ T7837] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:44:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000c00"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2129.498199][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2129.763481][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2129.895387][ T7860] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2129.912364][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2130.381373][ T7856] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2130.537442][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2130.545555][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00250003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0xa, 0x2, 0xfffffffe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) r5 = getpid() sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r4}}}], 0x20}, 0x0) getpgid(r5) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r3}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r10 = dup3(r0, r6, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r9, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r10, r9) 21:44:53 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d3e4d0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:53 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r1, 0x242a}, {r1, 0x401}], 0x2, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) write$binfmt_misc(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:44:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a5103000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000e00"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2130.919699][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2130.931482][ T7965] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2131.086116][ T7969] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:54 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:44:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x1402, 0x300, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x28}}, 0x40) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r4) 21:44:54 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2131.446936][ T7997] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:44:54 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2131.588451][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) r9 = getpid() sendmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r8}}}], 0x20}, 0x0) capset(&(0x7f0000000000)={0x0, r9}, &(0x7f0000000080)={0x7, 0x6, 0xfc7, 0x6, 0x3, 0x6}) 21:44:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000f00"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2131.919827][ T8027] warn_alloc: 2 callbacks suppressed [ 2131.919860][ T8027] syz-executor.5: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2131.993020][ T8027] CPU: 1 PID: 8027 Comm: syz-executor.5 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2132.002840][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2132.012892][ T8027] Call Trace: [ 2132.016196][ T8027] dump_stack+0x18f/0x20d [ 2132.020540][ T8027] warn_alloc.cold+0x87/0x17a [ 2132.025230][ T8027] ? zone_watermark_ok_safe+0x260/0x260 [ 2132.030800][ T8027] ? wait_for_completion+0x260/0x260 [ 2132.036115][ T8027] __alloc_pages_slowpath.constprop.0+0x2197/0x2780 [ 2132.042730][ T8027] ? warn_alloc+0x120/0x120 [ 2132.047249][ T8027] ? fs_reclaim_release+0x94/0xf0 [ 2132.052293][ T8027] ? lock_is_held_type+0xb0/0xe0 [ 2132.057238][ T8027] ? find_held_lock+0x2d/0x110 [ 2132.062019][ T8027] __alloc_pages_nodemask+0x5a3/0x700 [ 2132.067395][ T8027] ? __zone_watermark_ok+0x3f0/0x3f0 [ 2132.072721][ T8027] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2132.079496][ T8027] ? lock_is_held_type+0xb0/0xe0 [ 2132.084451][ T8027] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2132.089999][ T8027] ? __alloc_pages_nodemask+0x5c5/0x700 [ 2132.095548][ T8027] alloc_pages_current+0x187/0x280 [ 2132.100670][ T8027] alloc_mmu_pages+0x7f/0x170 [ 2132.105358][ T8027] kvm_mmu_create+0x3cb/0x560 [ 2132.110039][ T8027] kvm_arch_vcpu_create+0x16d/0xb70 [ 2132.115245][ T8027] kvm_vm_ioctl+0x1547/0x23c0 [ 2132.119948][ T8027] ? lock_downgrade+0x820/0x820 [ 2132.124805][ T8027] ? kvm_unregister_device_ops+0x60/0x60 [ 2132.130447][ T8027] ? trace_hardirqs_on+0x5f/0x220 [ 2132.135480][ T8027] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2132.140594][ T8027] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2132.146220][ T8027] ? tomoyo_execute_permission+0x470/0x470 [ 2132.152042][ T8027] ? __might_fault+0x11f/0x1d0 [ 2132.156817][ T8027] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2132.163830][ T8027] ? do_vfs_ioctl+0x27d/0x1090 [ 2132.168583][ T8027] ? generic_block_fiemap+0x60/0x60 [ 2132.173770][ T8027] ? __might_fault+0x190/0x1d0 [ 2132.178534][ T8027] ? _copy_to_user+0x126/0x160 [ 2132.183305][ T8027] ? __fget_files+0x294/0x400 [ 2132.187980][ T8027] ? kvm_unregister_device_ops+0x60/0x60 [ 2132.193600][ T8027] ksys_ioctl+0x11a/0x180 [ 2132.197924][ T8027] __x64_sys_ioctl+0x6f/0xb0 [ 2132.202504][ T8027] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2132.207605][ T8027] do_syscall_64+0x60/0xe0 [ 2132.212016][ T8027] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2132.217897][ T8027] RIP: 0033:0x45cb29 [ 2132.221774][ T8027] Code: Bad RIP value. [ 2132.225837][ T8027] RSP: 002b:00007f7038bbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2132.234248][ T8027] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29 [ 2132.243166][ T8027] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2132.251158][ T8027] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2132.259117][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2132.267081][ T8027] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f7038bbb6d4 [ 2132.621252][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.992951][ T8027] Mem-Info: [ 2133.005724][ T8027] active_anon:144820 inactive_anon:33350 isolated_anon:0 [ 2133.005724][ T8027] active_file:5831 inactive_file:10602 isolated_file:0 [ 2133.005724][ T8027] unevictable:0 dirty:25 writeback:0 [ 2133.005724][ T8027] slab_reclaimable:86266 slab_unreclaimable:312353 [ 2133.005724][ T8027] mapped:60262 shmem:12334 pagetables:2279 bounce:0 [ 2133.005724][ T8027] free:908174 free_pcp:788 free_cma:0 [ 2133.142257][ T8027] Node 0 active_anon:539840kB inactive_anon:123648kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221360kB dirty:8kB writeback:0kB shmem:39784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB kernel_stack:9248kB all_unreclaimable? yes [ 2133.222815][ T8027] Node 1 active_anon:38040kB inactive_anon:9752kB active_file:23312kB inactive_file:42408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19488kB dirty:92kB writeback:0kB shmem:9552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB kernel_stack:576kB all_unreclaimable? no [ 2133.298167][ T8027] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2133.370358][ T8027] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2133.383559][ T8027] Node 0 DMA32 free:72644kB min:70732kB low:79708kB high:88684kB reserved_highatomic:2048KB active_anon:539836kB inactive_anon:123648kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2578204kB mlocked:0kB pagetables:7456kB bounce:0kB free_pcp:1572kB local_pcp:1300kB free_cma:0kB [ 2133.392339][ T7984] __nla_validate_parse: 5 callbacks suppressed [ 2133.392349][ T7984] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2133.451345][ T8027] lowmem_reserve[]: 0 0 0 0 0 [ 2133.460711][ T8027] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2133.520255][ T8027] lowmem_reserve[]: 0 0 0 0 0 [ 2133.532149][ T8027] Node 1 Normal free:3551088kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:38068kB inactive_anon:9760kB active_file:23312kB inactive_file:42420kB unevictable:0kB writepending:124kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:1284kB bounce:0kB free_pcp:2416kB local_pcp:1436kB free_cma:0kB [ 2133.577442][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.647685][ T8027] lowmem_reserve[]: 0 0 0 0 0 [ 2133.657027][ T8027] Node 0 DMA: 2*4kB (ME) 36*8kB (UM) 39*16kB (UM) 36*32kB (UM) 2*64kB (ME) 1*128kB (M) 3*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10264kB [ 2133.667240][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.693284][ T8027] Node 0 DMA32: 1683*4kB (UMEH) 1915*8kB (UMH) 1742*16kB (UMEH) 669*32kB (UME) 29*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 73188kB [ 2133.727027][ T8027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2133.753673][ T8027] Node 1 Normal: 235*4kB (UME) 77*8kB (UME) 38*16kB (UME) 29*32kB (UM) 19*64kB (UM) 95*128kB (UM) 43*256kB (UM) 24*512kB (UM) 9*1024kB (UME) 4*2048kB (UE) 853*4096kB (M) = 3551060kB [ 2133.792164][ T8027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2133.812074][ T8027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2133.832835][ T8027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2133.854722][ T8027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2133.875441][ T8027] 23453 total pagecache pages [ 2133.884855][ T8027] 0 pages in swap cache [ 2133.894855][ T8027] Swap cache stats: add 0, delete 0, find 0/0 [ 2133.907923][ T8027] Free swap = 0kB [ 2133.916357][ T8027] Total swap = 0kB [ 2133.924899][ T8027] 1965979 pages RAM [ 2133.933428][ T8027] 0 pages HighMem/MovableOnly [ 2133.944165][ T8027] 349901 pages reserved [ 2133.959055][ T8027] 0 pages cma reserved 21:44:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00280003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:44:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d3e4e0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:57 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:44:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a5203000200008037153e370a", 0x25}], 0x1}, 0x0) 21:44:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d001000"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r3 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r3, &(0x7f0000000100)={&(0x7f00000006c0)=@l2={0x1f, 0x1ff, @none, 0x2, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x800, 0x20000) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)={r4}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x8, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) dup2(r7, r6) [ 2134.120150][ T8093] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2134.131317][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2134.278286][ T8102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:44:57 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:44:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r3, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000000)={0xc, 0x5, 0x1, 0x8c000, r4}) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x7d2d) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r5) 21:44:57 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2134.708690][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:44:57 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:44:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d001100"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:44:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r4, 0xffffffffffffffff) [ 2135.024660][ T8089] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2135.089158][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2135.723969][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2135.742745][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.832883][ T8096] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2136.298211][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.504904][ T8112] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2136.617811][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.777474][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d02290003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:00 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d006e0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:00 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r8) 21:45:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d001200"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a5303000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2137.122651][ T8226] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:00 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x4) 21:45:00 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2137.553824][ T8266] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:45:00 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2137.819296][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d001300"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:01 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2138.849490][ T8304] __nla_validate_parse: 3 callbacks suppressed [ 2138.849503][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2138.865890][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.003865][ T8241] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2139.084282][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2139.657384][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.720873][ T8249] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2139.897369][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00370003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a5403000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:03 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) getpid() lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xd0100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000980)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) r8 = inotify_init() r9 = inotify_add_watch(r8, &(0x7f0000000080)='.\x00', 0x400017e) inotify_rm_watch(r8, r9) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="df2506000000080002000500000014fe880006000000000000000000000101"], 0x30}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4084) inotify_rm_watch(r7, r9) 21:45:03 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00770003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d005400"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2140.172889][ T8356] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2140.259556][ T8361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2010, r4, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r7, 0x8004500f, &(0x7f0000000000)) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) setuid(0x0) r8 = getegid() fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, r8, 0x1000) dup2(r5, r4) 21:45:03 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) getpid() lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:03 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) getpid() lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:03 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2140.937468][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.065981][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x14b300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r6 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r6, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r7 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000001640), 0xff5f) r8 = dup3(r6, r7, 0x80000) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r8, r4) 21:45:04 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2141.274124][ T8360] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2141.570783][ T8437] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2141.985718][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.043545][ T8373] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2142.572454][ T8371] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2142.709040][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d003c0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d006000"/20, @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a5503000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:05 executing program 3: creat(0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)=0xffff7ffb) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4988c1, 0x0) write$snddsp(r3, &(0x7f0000000100)="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", 0xfc) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) 21:45:05 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00780003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2143.038487][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2143.216840][ T8507] warn_alloc: 5 callbacks suppressed [ 2143.216862][ T8507] syz-executor.5: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2143.247416][ T8507] CPU: 0 PID: 8507 Comm: syz-executor.5 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2143.257259][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2143.267314][ T8507] Call Trace: [ 2143.270623][ T8507] dump_stack+0x18f/0x20d [ 2143.274968][ T8507] warn_alloc.cold+0x87/0x17a [ 2143.279661][ T8507] ? zone_watermark_ok_safe+0x260/0x260 [ 2143.285249][ T8507] ? wait_for_completion+0x260/0x260 [ 2143.290555][ T8507] __alloc_pages_slowpath.constprop.0+0x2197/0x2780 [ 2143.297188][ T8507] ? warn_alloc+0x120/0x120 [ 2143.301700][ T8507] ? fs_reclaim_release+0x94/0xf0 [ 2143.306746][ T8507] ? lock_is_held_type+0xb0/0xe0 [ 2143.311694][ T8507] ? find_held_lock+0x2d/0x110 [ 2143.316916][ T8507] __alloc_pages_nodemask+0x5a3/0x700 [ 2143.322303][ T8507] ? __zone_watermark_ok+0x3f0/0x3f0 [ 2143.327613][ T8507] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2143.334382][ T8507] ? lock_is_held_type+0xb0/0xe0 [ 2143.339327][ T8507] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2143.344880][ T8507] ? __alloc_pages_nodemask+0x5c5/0x700 [ 2143.350434][ T8507] alloc_pages_current+0x187/0x280 [ 2143.355585][ T8507] alloc_mmu_pages+0x7f/0x170 [ 2143.360269][ T8507] kvm_mmu_create+0x3cb/0x560 [ 2143.364952][ T8507] kvm_arch_vcpu_create+0x16d/0xb70 [ 2143.370159][ T8507] kvm_vm_ioctl+0x1547/0x23c0 [ 2143.374846][ T8507] ? lock_downgrade+0x820/0x820 [ 2143.379707][ T8507] ? kvm_unregister_device_ops+0x60/0x60 [ 2143.385342][ T8507] ? trace_hardirqs_on+0x5f/0x220 [ 2143.390367][ T8507] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2143.395488][ T8507] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2143.401127][ T8507] ? tomoyo_execute_permission+0x470/0x470 [ 2143.406943][ T8507] ? __might_fault+0x11f/0x1d0 [ 2143.411717][ T8507] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2143.417613][ T8507] ? do_vfs_ioctl+0x27d/0x1090 [ 2143.422380][ T8507] ? generic_block_fiemap+0x60/0x60 [ 2143.427585][ T8507] ? __might_fault+0x190/0x1d0 [ 2143.432354][ T8507] ? _copy_to_user+0x126/0x160 [ 2143.437126][ T8507] ? __fget_files+0x294/0x400 [ 2143.441812][ T8507] ? kvm_unregister_device_ops+0x60/0x60 [ 2143.447445][ T8507] ksys_ioctl+0x11a/0x180 [ 2143.451779][ T8507] __x64_sys_ioctl+0x6f/0xb0 [ 2143.456372][ T8507] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2143.461523][ T8507] do_syscall_64+0x60/0xe0 [ 2143.465943][ T8507] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2143.472364][ T8507] RIP: 0033:0x45cb29 [ 2143.476252][ T8507] Code: Bad RIP value. [ 2143.480314][ T8507] RSP: 002b:00007f7038bbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2143.488745][ T8507] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29 [ 2143.496733][ T8507] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2143.504701][ T8507] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2143.512667][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2143.520638][ T8507] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f7038bbb6d4 21:45:06 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2143.892958][ T8491] __nla_validate_parse: 2 callbacks suppressed [ 2143.892968][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:06 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) [ 2144.049143][ T8495] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2144.059379][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000003000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:07 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a5603000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2144.377931][ T8507] Mem-Info: [ 2144.393170][ T8507] active_anon:145175 inactive_anon:33366 isolated_anon:0 [ 2144.393170][ T8507] active_file:5829 inactive_file:10617 isolated_file:0 [ 2144.393170][ T8507] unevictable:0 dirty:69 writeback:0 [ 2144.393170][ T8507] slab_reclaimable:86727 slab_unreclaimable:312693 [ 2144.393170][ T8507] mapped:60267 shmem:12365 pagetables:2291 bounce:0 [ 2144.393170][ T8507] free:908536 free_pcp:911 free_cma:0 21:45:07 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2144.511243][ T8507] Node 0 active_anon:539824kB inactive_anon:123648kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221424kB dirty:8kB writeback:0kB shmem:39784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB kernel_stack:9248kB all_unreclaimable? yes [ 2144.666263][ T8507] Node 1 active_anon:40968kB inactive_anon:9820kB active_file:23312kB inactive_file:42476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19748kB dirty:320kB writeback:0kB shmem:9684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:1024kB all_unreclaimable? no [ 2144.772542][ T8507] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2144.819841][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2144.910530][ T8507] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2144.940861][ T8507] Node 0 DMA32 free:83756kB min:80972kB low:89948kB high:98924kB reserved_highatomic:2048KB active_anon:539820kB inactive_anon:123648kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2578204kB mlocked:0kB pagetables:7456kB bounce:0kB free_pcp:1852kB local_pcp:444kB free_cma:0kB [ 2144.985035][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2144.994538][ T8506] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2145.085322][ T8507] lowmem_reserve[]: 0 0 0 0 0 [ 2145.095862][ T8507] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2145.126993][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.195537][ T8507] lowmem_reserve[]: 0 0 0 0 0 [ 2145.211211][ T8507] Node 1 Normal free:3541672kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:40868kB inactive_anon:9820kB active_file:23312kB inactive_file:42476kB unevictable:0kB writepending:320kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:1568kB bounce:0kB free_pcp:1808kB local_pcp:900kB free_cma:0kB [ 2145.307226][ T8507] lowmem_reserve[]: 0 0 0 0 0 [ 2145.312016][ T8507] Node 0 DMA: 2*4kB (ME) 36*8kB (UM) 39*16kB (UM) 36*32kB (UM) 2*64kB (ME) 1*128kB (M) 3*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10264kB [ 2145.347274][ T8507] Node 0 DMA32: 1741*4kB (UMH) 2654*8kB (UMEH) 1836*16kB (UMH) 749*32kB (UME) 31*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 83524kB [ 2145.407152][ T8507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2145.438075][ T8507] Node 1 Normal: 104*4kB (UME) 91*8kB (UME) 19*16kB (UME) 2*32kB (UE) 38*64kB (UME) 45*128kB (UME) 44*256kB (UME) 24*512kB (UM) 8*1024kB (UM) 4*2048kB (UE) 852*4096kB (M) = 3539432kB [ 2145.531815][ T8507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2145.562787][ T8507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2145.604831][ T8507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2145.653752][ T8507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2145.700207][ T8507] 23499 total pagecache pages [ 2145.705587][ T8507] 0 pages in swap cache [ 2145.717457][ T8507] Swap cache stats: add 0, delete 0, find 0/0 [ 2145.723536][ T8507] Free swap = 0kB [ 2145.735220][ T8516] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2145.737569][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.777576][ T8507] Total swap = 0kB [ 2145.781334][ T8507] 1965979 pages RAM [ 2145.785136][ T8507] 0 pages HighMem/MovableOnly [ 2145.804423][ T8507] 349901 pages reserved [ 2145.847843][ T8507] 0 pages cma reserved [ 2145.917252][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2146.137579][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2146.314877][ T8564] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d004f0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:09 executing program 3: creat(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00790003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000005000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60) sendmsg$nl_generic(r3, &(0x7f0000003900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000038c0)={&(0x7f00000002c0)={0x35fc, 0x28, 0x400, 0x70bd2c, 0x25dfdbff, {0x1d}, [@generic="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", @nested={0xc6, 0x93, 0x0, 0x1, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x74, 0x0, 0x0, @fd}, @generic="52041132f3dba264fe3088e94960f221f678c16263cbbfd6a09f8232eb4386c8d115c706673f68ed218301b8fd88a68b90ee74ef3a87af411505f8c538af4353f3d8b383facf6c157fba297bd1895361c12cec1322f600576e59ad1b58e1ebee590e18b32727e1e7659148df7c90fe1336a3ab5388931af5e4d1894b706ca83db067438c22b0fac054de85029487e66f460d", @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private1}]}, @generic="1928fdb0fc88af7529cb7a8027cd1ddba4a7c285880d415f680a97619bbcef27355426ed2b97e9bc36b020a24d641e9ffb73ec123606411d2276f7c723d568112b31904d833fcab8df4292f6f24c4e1489c167d20428c4ad215fdbd7e04fdd5b1d15181e7afe7ae135018fba0792cd17a5c6d488242d8a63263f3cef266d8b3a3a5af32c31433689fc90dd0cf2a5f577420c30fae9733c8086b9c207811a0cf7cb8c2326fc1f20578bc39376732bfd8ed42038bdb0890677cf028e8ef1cf8cc376f8", @nested={0x113a, 0x46, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x401}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}, @generic="b3b87d6ece7d7060a5c1d432c45eadc87b7a996121fcafae4f9b31aeb9064c857ff8a5e6515565bfc43ac2c2daaddc950547a60fd678b0fc1d7c74b263968391efc05ded194f240062ad18bfd7cc846944f1223d7de73f4ea90398087e1200a824a244558cfa788bef26fcf7c5fbb2e7e52657311375b9e624c9978c15711bc6843ef9f4e78056b138f03f33458906109a95c55fc053965de038392bba3b97810bec23a6ab9ef99976a55e005ecc75fcc91430d202b60f3bf53ac33e3a0903fff65c0b80fb61df8d94b2000ecfc374624b4ba94ed1f8f0ed934d63298a08251489c66fe2938967231e6533d23a81ed70a87a0e3db57e6abafd5db27718839c06b9d5d93f4fcf660a22e87bfdf9f15d5c587ae9245ac4e9a592cc98822a8b01fc4106de36276dcb3fd9827a09cff45854fb0c5c34420350b3797b193511e7c1889afce71400edc7e10bc141fe2174fd0ff90f3f1bbb0ab1cb5daa4c428d247c764a0e1fd0b0f7d68b50b7b1d486d5266fc43abd5dc765059e7dff5de37a3629cefd88fc15991be18c239256c97d50740beacfd24a18c498031bcea3c14348dd9b21368ac66d2e6ed0325392d44d0cc67a0a30e37c2d0f1dd1211be9985973f856236a3d746e7f24ad4a1a3a8afc8a38bc92f3f3d3baa414d365cfe5d214c9f689310fc6f299b84f103fcaaf8ee286bc2ed11fd929bb7bfa17dab01a3c5b7fa1830c4a4ed8b59ccbeb78021fb13117e599931f2046d22abb315e39159086b385d2e641d77a64f756d01aebb83f05ce18665165bcb64e934253d5da56dde9dcb9e70736cde29ab8085f9dbc17a7d9844288bf79dec95967f00909d9c789e7f0bab0c8767d0d992b6b568d32dc10a03becf8f0e37041cc5fa6252681666bdbd35ba5686a200eb22d24cad840c1389057cb2e16a498d28e4a17fe089844b96001e163cb48bcec9a3cc5fab0338e7a8dc7b2218c437308adac7d18d4ca5b10e74db4ea1d4f857076a59b0cf71e12af940b5bde7c7a9c51e927654977e1a650fc1751bdfb8be7da5411554cc3a5022a5c1ad9901ff66e87452f152f4978f56ac97907c81af5c584c8b51470bd39b07808d07c6b973c1c508ec4d7c0253b415abb3417dbf69f9f1ba7b2b750e35f48e454fa16d01d9090a87354e4ea1d7d1543482ae3a12dc1484f40b6b760b809ac915fd74c626115748260047305bd50342f2a768bfb5d99b82e99c07212f185d7c07b444d122bb19ad8d182d1fd2226b5079ca2372dfecf1a97ae989e7fa7a08b3560342756b2c59e621202e09d46f275d31f52df662bfeb898c0562b22c04996662e5d10db720b6478f64b0822a4fc761b9f0a3efc30ac1424ff8437cdcf869fe2e60dbd7925daad4dd57c44180b55018ce6beda59677890366ccab389dccdab24a070233c8dced6ff9fec14701a6766467339b6fac7aabddbb5b4004882db4d427690f412f8fe71f293e587368ca7d20aec0127a0d5d5b18bd0b37222db60c63de5f4f1a9cee9725ac0bb851c1fc9315cae4a8447dfe4822a60c26524b5cc0cf7c90559b5c106ea04ca3ace9211d2450811015a58adb0ed291f2cf0eb08dd016547100f1e1b7edf8b5854f1d14c07165e7400173454032bffd02852ece8db66bad5b4088893bb85692af1eb7459fd7d7412191b2e8c7fa7381b1a627d595d994f5862da9fdf09c811ffb15f35fc87d37d57e80ed852f018fda362a29655810d16568c022fe0a0eee184a5a95e4f36f17ab541b325e345e95f7af9461c59cd8d92e3b2edf1fdff4b1f8083c9bc2121870b2681d3ef8449ba713c64e6c4a4a8e2f30e255b423e3bb26b8733ccd412deec35902a7b11627e6ee8982ef27e549e56661548e0a31b72269ab336fcea0482b0c25536b2ed35b6c4c66b160849c122f48d7788dba43e4d6cc85a75f2ae9cab37d670d0cd73aa868ab3badfab8bcbc14b4ed98d6cf295ca017ceef6ed16274937bc9a5eeb06bebb99873e0fa5d53095eb6a588bd135c4e4ab9f54b4137069fe1eaee5b9563549dc0bc61fe152a47e068fdd4b5f7c7d440002083d8f2020cd8d8dc4c5e35e3838983761d171c351bad4484ec2a5fa3a8aecc9ea7f755fc5bc0a88aab88eb901fffb379c79222550feda6c51aedc9865eb81a8fb625b968c0fcfa1ade5c31818efb6970b75aca68906b787b569365c46fae9c1b1bc45878bc11ac481fd4c228bef535fb1efbf009c5ab1c1d2434ea3a0eb0fcc4364dc47fed4562b3c25f0a1471caba8926566bfd8b7afa7503279733fbb0bb664b27f8722b1286968c72d83a34efb29227d5abd7589eaeead6664e3c6711c791e98411537339dcb3750002d42c84755d12f6118c876ed871db18b07baef30155a42c32cc59f61f29ab5ddd3b11a470f0c61b9d8c93d76f5e7b43e6f173b34e0d601ed736376c30fa0dea6b8292e322a21352e7a28fdcff2d4d4d50279b617238fb6c3421058d032bd4fd9da4e3db6ec9913d26148a023c55e5fc1164dbd8564618e65977f4e7c4f7e6bca0b24e593bac416c5d9f0eaa91ef90fbf62f721b7c897bdd5e1a311d934df9e780fae3713e665135fdcdd0ccf311b0e007c022bdd34e357981d50d34c2c7614f67486e6d56f463dabf9a1cb61e90fee12e19f4767cb28162f23e1f93fbbcdd10668f889767cf2c899442bcb931b778d2270c2de0067b155492fd053751f7fd7e1764545e004124d8bc06ad68904e17f30a449b4eee208072b4b1c4b26afdd5463793c70b4f780704a0dede893ef6922908111ff8610698153677574744d66b881b21a9ec6e79bb5ac793e25c112e92d4a994ef32fae18172244a272358c8c33c0dbc035509e619f5b9872a5443b8b48210e9e33e955404e2742cb46bed2ab17b6f66029c94b8343e00a1586dd599bdee7484f25e79cf85337e6a77d776de4dd6ef89a8f59199a0880269c775928f78598b29a9b00fe65db732499e8947aeaa9c7027bfd627aad067ce91c2a3f9eda53ac5c5f088ed1d2a2d43809706c0fced2062bd055de7340d5bdb8299881f525042e4d63e14b27393850240646901518c4b0ae60153eb2567156e68a82154762cd7b826154112469ef958994c001c629d12178c0f55c81476fc70302ccf277e256c7a235482718a900f86dbe1551fbb797a534cf0d28a88dc33fc8f05f6221b3ca9b48243618e480ddcbe4acdcf1f963e95b8c62954800dd7930ebbb8ff9523d183a7bcbf04aaae125cb2037d497dff0681bd229e642f5b7fa27f080423ba686e987ce32940a9f4c71b74380d9957d3741961076814f08d126ce60e376704c42b9dfe7aeb2b3e9cf5d4b917f6da91678d05fe7f050889a12383dbbc4bcadf2d9abc015bf0161c408139efc379979be0aa45ed142f2c352e7987bc423b28e661f8e34fe4d881d763016b660c902cd60939d14dd8477c7b13b99142d31d577ac231941b2d93d49220aef8fa6b9d6af8b5c5941016837c4586115e83655f6a910b43cb2c0c027c085987792a8fc4287c048e9bfc02babc51ae1434424395231c889d9086812d074dafed7f2101c667fe2f99541e18e043b2a320b9d35bb36e0d279948ea4415177510809c44d36e23fd7a7a09277ec80e8cb1b2c33b908cbc4010281ea2dd2aff6ab770b629c64f48fa15f089ca16cf87ca555f9eaf66942ec7fab82dbe504a5306820f36b70d21903fd7f03959f1dfe5115882bf6be36c4a9355f9adffe1ad9a5c9e8397b0801838e580a8fa1203f894ce508e91db48215f2149cf1edaef6298ebba61f7e22429a1f73438d86cf8ea6a1b87eb13c53d8232bc4e62c50ae7885752d8caebdad15c5506155eb1bbdb03cb8f72887d8abd1f97589de08b5a10af60896fa354ef1a6c20578e2bb6783169e9a015a562fbc417e38acc5773623a176d3fe5232674a6aca684a8c3987687d5082ca4b54be7d9331aee1af7417a3369f29a519c79532f6bcfc0aa39a0c4e999ed3bfc1d00cc71a2959222d6e43c7c0139891cb139af1cf59c67b98a8b5b93afa58846fb7d453fcc716426cfb50c0d885ddfc8221de97d25a3b4f68070f3d7b4da60de151de26ffcc6c4016ba7e619067a9333a534b2d93cda39a9d7b6c08e55dcf5dc30f29fb4a3d2a1542915dd3b549289957bf2d9e8e18932a563302632f46325fe1747f6299b2e7622d2275348241907115ca42bcc18239a495451340ff011f8766c969826ac3b8290c1601dbbe1201c10bc78310444ab77f2e3dd9f794cd49f02e76fa71a43528250617bab50b3415cb1711b6f9bf0edecb4ada54bb9a69270e97675f9920e2768c63cdec61a6c6728cbadafb775342bd0a3af1767fdafaf88aba02feea28a0ccb146565bcd755a236b365478090aa1eaa20bed2e6e72852d7ad50f37d44400225055a010c88aaed4565b62c7f0b97ca910d8addcdfc413b00f08205699cdb22cb4e3f7ac508ff29faf16a69f15083fa313e1a8326ae17832c55f6e0c54f957cfa51b88a83eb8dc08466825ac8ef0d9df891dde33cacc31ef7e9341b696e07a973eac3218070960ae53534ce4527b9cb06665c2c29233d356189c0b8978806ab7993e75432e1aa5ca07c1e1d26b06f81cc2b9ae3640640bf809aa297b0525375f54711bebd0212289ef0fac983c0cc3a86bb28ce7485cadec937c54658f1cead3c4f79a89cd401097b4bc5514755e7043cb777e8a9d9e5ebd9b139286cc71c9cc9c12f0928176e291f3c008f4a4ac2e18af6daed9716c105b7ec26610b987424eaf194210d0e5458480ac3d5aa29eac4aaf8add098d190c7920ab1adf5b22675d5985ef50127fedb8cad79d524d56c9bcd04ff04546ee62b26080236db93e6162d182256ff27d7a0afdd9fa60dcaebfd3674dd141e339106077fd3c78a956071c4c846e9e0b4fa92e729f72d988f01cc90045bc709354b06d90a53273e41fe8ddc621e32353f9dd07916ce8391c4624045514ab7e288be9028d17eadd1da9300d5e541782ec898da44fc9d7c7091db962b687747f1b1754826a638f0f31eff326d58e27c1698aec1f015ebe102611568e680a0bdb88ce6098fd7e26d77e39179a50e2785a49b0a01fc86396a3cb172848fbd9ece8264ebfd2c069ba7998dad5531ec62763e5a581db7390795fcfc8660d998a6efeab3a0d541ce70cd67a841438ae7c763faf538c9933faa692339ee071984afb6e2b0d777873cdd5887bed227b0326aabdbaa012cee9b4f82d775b28036ebeb194e278abf4df0d11cea4dcd01029085d9acb910e67bcdac52d31250017f4fa614d631fffb93692f60ba73b1cd1adf7f20cff86f360843744477b24c3fbbf6f534e04cc2ca267ff793c327415ca20ddbdea360494306ab3c478cef689b92b3d87e14e1d790b38917f6da883b5f70fe8a07b897bc6a7d6b748e28acea05a8b9851b9f43de105bb0de7379191c8f0cdde4e39f52d986859df5092de7755da53ff18b8be54a8a9caf1de9cc902767dba16c5bd0a49d7afe26d02f7865c824106abad70bf92911558c7f6087cba9b2b0533133b3fbbd1c21071fc8235ebc8e0b02d0714dd0d1128acc6807303fc6b7c8489dd7ce50d9f6b397cc27a35a906d1e8b1001b29cbfc91904fc5b2b4baaad81db0cf817928fc2ba11d68b36c51277f9a0611ebb3d80b2e12d6b921509983599ce34b74cc51d8ca91d4e5446170f8ed209e3c38fb613954e0a8a5fd85dc86947ee4df46cc7ed72a7c615f55eaf2487d18f21ea02347650c2da62c6dcfd513d63e99dc9331f84cecabaa6a085dc54db53dcb5834d039", @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x4}, @generic="267f44bc6d3b0e85b42f6b8205424bf9f773a1b9e8ba82642c042f96e0d45ecc4213717c33e6798258cf2d6c17faab", @typed={0xc, 0x1b, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @pid}, @generic="e8e41766d6c72f5d6d2474489459933afe2467f7f65147f579354d09c2a8d4c92de56dd5a59ac56b8a58b37a12e4a8c55dd732f5860fdccf61d449cc8b83cc1872550e0ef6a1b5fa840b4c9d1f34574ebeb90d02029b70dd83b766660ec855c8120173f7000df2f9bd37a30a5d6a0f785c5af11d91e21a9d6ffebb33cebb9f7e8541732336c291b3b7fee4678a326be98dc0e25ab6f391a02fa30bac8e04cb168a75884a1fa4d96f732bd8ce4d4a0c4642d98f32e8186b8bf576bdcfa86a8d290b2fe619bd3ce4fc4120d00ffe67a6c61b843e2da5514f"]}, @nested={0x168, 0x48, 0x0, 0x1, [@typed={0x82, 0x65, 0x0, 0x0, @binary="ba5860be6cfaf8c87225dca64d4c95261c3f98eda8b6f1e031ebe3d826a32e9064871009b470ea5ff9fc868b70bc0768598b291113e98debfd5dc6eb9e2a50844461dfe28e2d854642222c8e7a1a55f409e7866a3f7545a7acbc9522bae1e1306cfdc212dddb2b8fd48cf1bd7bd6dee2cd92445a6117eec2ce38e0636478"}, @typed={0xc, 0x93, 0x0, 0x0, @u64=0x80000001}, @typed={0x8, 0x15, 0x0, 0x0, @fd=r6}, @generic="817ae499d6955765f2282231ba17f0c1a79533aa61c0906576b9a74fe14203604f8d58c402b98d0050a051ed5ef30fefa074ee95348ff18dd23558653dec1b11c211ad11caf53a335d5e4f91316c0900d0651f1ecda6cfd6", @typed={0x61, 0x6b, 0x0, 0x0, @binary="e45798d4571f35aa01b5d218c99fbac61ed23693f353a67d39869ad490bb15d9f32e7be694855d1a2ce19e9d83eec851038aa193116b0ac23962546fc61df33f13d82238ce7850b84f60e9fd30ca603636bdf4679a12ef3710910c02a0"}, @typed={0x8, 0x40, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x11, 0x0, 0x0, @fd=r1}]}, @generic="86ef22d0595d68e7c9a6f6fcacb50f6518c18b112fae013b6459a06bed7dfe8ea466d2fff2a0fc71202d1b52ddc0b3bdd2d2a2ffdd1edaec651ce3b4b469d4ee1f935e5bc3165a9292c5b4129128aa43bc3264c577fd8113", @nested={0x1124, 0x1f, 0x0, 0x1, [@generic="4bc2fd35f4e307ad4357c22a5c2e2fe98d1e4dcee81bf18eb1a9ea52f63ab873b5b4f709cc928dd67ae6247cd07aeb77a10adf74fd6682728b5ea8d62000b7b189244a0371", @typed={0x51, 0x17, 0x0, 0x0, @binary="43684fad9fadb1502456ee7fc397c474c65752469602360c689c8f298c4b575731c6c934e8e9eda776140355bbfaf27fdbd19f74d5085fce76ee2e6a075941197a169ff5f083511ad982094413"}, @generic="cf86db7c18c3d71044e46df7cdbdcbc80cec8735d4ca4e8bd5e481318a9b5c1c5ef351713990207cfd2123f06a55bd1f96facf89632feb11d56d70e4f078ae1540121e37745d2178f7a2e7f59c84468c9b2e22a49052de74484471280c86ac76084ec0d4bcdad2be8e02e99ecd3de1ceca795f133580e55c174520aa35b381784adb82f3286292a1d87cbbd4054150cece4c1bd7ca86756a2e6efa67427ecd0931f674005e93003b5dedd2c24b36f7153b490e5c07c00b216b9164a195b263871d546f84b6ced4ac64b8dd3b1ad1aaafeb1bee216bb66a52624256eb111d509800c8dc3c9425b09b9e294bb50759ce001b5b6a8ebce9a3d0cd088b47096a7ea0408901ef5cdc12e45db3da444398f92c6a085454cdd11337f94214375803f488bc73879a240cdbdf98d8858ecdaf7c856ed43f80d3d3630d801e4b2966c4ee07d7207b2d7d3e4e4127f3ed0a1c390afcd11ed37d90fb4d4349500050dc652b3c8948e43209a913698578f2736470e04ce2f5cbbf626040a5bd81a3e610ee6afc20a83a12d00853885bf463fb969ad0642cff4457e247f6f1fd9b921667980704e15f74c61b87b9da2fa66b7b7aa08e48a3867497e8469dc3f4a23995c0812bdb1ce98d651e321d3a51541f82ef639b7e79ab05186f09c50f65d86d9133249e3d3dc196d545e886e53ddae460ca861bb61b72533ae46a45b1524fb270000bca22d44405cb4a4c23c82a6eccd88b72ba2b3fee3a5214b2cb91a8f5784e0b9aeb40c36c3f60bd69613dc445996c691ecd2871a6602e11390f309b92ca046a9e4ef15a77330ef7c102ce14d95f64a37c63e4f85b719506ff4792544e4247f07081da82ad9aec41670b9228b648cd0da82d3729117db9fc5734e94d07aa7d0ec08d3e403366054f83dd3ec6e1710e3cce0e01f6f0319e41bc1a28f6ccd9547345b010774b36b9b503c0ee93e4902f9bad25a33303040518f9fb011ea0cf780126179697635b3072bb042cc6de4107d2a14ff5557cfcc3e6048e347f72ff543670dce65afb9f2e7a01aa9d8c21ac73d284f36c895899605bbb53b553374126df98904dad9073b1cee5a6a29e2512fea6f820066be2a00c8c566e8f598f10618beef9d77fae72f120e95f2f4985319220b64ad65bb18daa1727bcc37f1a30aa8ab9b7cdf04de2f453c1d4ad5ae647d15d399f6a4dc405f0f79a92cfd69f2169cf211da36efa4acd7219e4a5462e9285dfea9debe2d70168bd559f05d43ceea0d10130eaabb0aba2c5d737ccc1d296772c8a46fc1380b43ad8b3905d5d110ad8d22ad5e521721eaedc90fd411ce3d6f58e7e42822e4ac8c6b40347093f94346d94c6e9aeeb18360dae2b62807a101333e9e173f98c6223be91b361c2ae69c551f53d9d709d8f8ecdcb398ce928e36d96ef06d508e59f53817571f2a7381f37130bd988d4ccfe1eb5e71595835cbfb3bcc76ee133d421285cf76ca99a44d7bad27fd1d43deff848bf3ea990bfe4781100c5276c728385c6e1fae5f8c508b71765b7bef38798f186d3939e0dfa9d637bfa31a670d3404388c75e987226fd0c5648dc275c73ae52904f3d1b62bd3ea278acdb8a4d5c91a94c5e803daa8c9bbe7d9e20cb2a60582138bed21f92634a6ea957bf9e29a2900bdebddbd508d25e8bd600167b7ca173478eabfcda81a536bd76ad55350fce40930725ae2322518f5e2bc7660f58c52fc9370a2dc0956fc087614115c2fe13bf69d13365e215b088248d21f47620b42df36872426ef227a32077011f033f9461cf2dcf89e66282b50238e1dca0174c541b590885365f868cc84ed2c0307cbcd8d00337aee317b3232b38b5e3de04789730529a17fc986f7986de8d73cfc729b9ecbb2ec4cddd1031e3cd4770a10dc66e22b341e3a58284e6b42ae9e9aa2b7ddf3252e28fe7546132df8a5b93c1f31d63b4f556ad043a114b0f0bfd40fd2dc7564f5e1da6abaabc4c4f04049ad461cc0b049a6c47e06cf412cc519d546aa18612e6cc4fe68ee2127e7b193310766c1aef7300327eb08262b9a65d333ab5e5c965793786458eaa5744572646cf73d97dc88b617a3e92c9698022e40bb203fb3b9c3131f45fcdc56aacae27334345aca9c36b0b960b9cafd6821e9cb9ac3a723334e12d4026d3cb4f39aef94a2cf5e861067f7e095f86277e668cf7c65f1f2246971ce20d0bcd3f9e1ac035e299aade68d40edeb263116491c4375f219757d890dabaeee34e78bf47d93ed7d4cb113f65b848b9876750b606f39f7abd4e46aaf266c1a329b3d54dbba31dc836c3727ff87bfee73af8256ab020e59b51c974f5c73f8b10ecc2569f7fe806e18bcf143a1dc09e0f9dc6366b8f355d4fc92b0747e452d2e6955240a575ab2931085c47f2397899ba60edf4898075f9764ad98149ad5e773b5fcaf1d67f6f10ee3a5b9629941bf6c975a2a84be9fabd0302d01ccf6b2614e9e1b7e91e6428fec005d6dd64535dd5f00314f13110d85605e7d26de73db5a128e76b136f0d62591fb23529dbe67ac28c2a1ba778010db05c4f803bc329f40ea52c2d82d8b7dd91545dd6b8e4520fce260fcea13c00267c024aa497bd9ed1a541439478c1ecb652595397b70b0683432d315140a06367513ff7d80ba6a034e618436dc9d36c082c80565d6593fe0ebfc9295f135cd983f2f08966402e58c97f35961d0fd88edc589a7e30cdec8cf7922628e95bc61805c794555a963ef4097cccd36aa4479d7302a4c06b38cdb5070614c93bd5c58b2ad6121bb388c5d26bcb7c49474155bb5f0055090ccd9fad6153cee8640502228f7b0d2f37895e7fe47a136f204c659738fec19ed632e9db6fc18131c124dd3131799c1570776377392924d792f603af8bf18a165d3e87d7b0b5d3a697ee7528b4c08d5a681af3415fb249d2b8c6ffbd5933f62bc259b88bb45588e3bff6ec59dac19d0661d1f4818441c386dd930ce9ae4eaf45905141810adc3c4ce0434f440b520c068d0aea3fe7b18353041d90da11609b6bedc16cad20b2ef78c995483af900f2df7680ab2a1bf0cdd5f69fb1769ab9d48a3445a80367a73199a782a19dc63b7a31d6085ec747e67674a1a8a39f57dd9c60679afbf63cc304342421ab3b3cedbff306152b3476ab2fc79e889068a9f20cd68d338040d05305746eb2f275a1fb511e7d0195de397240913f0385eb297106dd4472a61f1ef317daa68cdc9af587c8eda51e173bad5557d4716799885a6282f85c62b1dc10f38a12cb1b7779a9013b6497a7ece54fec149e976e6ee538a3fae8f092af0e372827eb7b04aff97a5d36c74792c5dfa09e3740ccde5b14579bc673e3c52551567445d7770ea3e43fb43582b3788ef62232c4a8605051b29d2a05412f68f0650274db9ffb7d1f9d8b6daf1ba7b1ea61bbc5df1dfba24c25cc4d5dc8985ad3bbf942009b77339fd8f39c047921f2e479a9a8ebc511696e57ef1f8e12e9e10ee10a7418c8b5420b0af096d5746b0d3b30dc540671fef88db367bc441d589a1339f340d48fdafa62145b9a7c7217bc8b49bf06e923844740cece3b7a81eb6a8e8d715f9a29ec051c8ab3bec661738266b09cebc6827eed294f9d9a48332673d31e41c11f92a936f3c35f6c7e368121341ca78d3dd25420d7d679fe0a483136554e391dd478a39a91fd6046d231724f1193894b984838e09ce7f83cfb0cf9316d34a021cff964aa0f8c8df3b036ea473c5e7b7b4cd8ce7bbd2fd6c9cb93c13b4f3facf6d95c96d57806722a846e5b22a950174c479465fa3a78d182997275603d9fb744a99e14e7fb26e66954be9a8cdb57fdbcc8dd2f831c4e26a3e294ca6273ee56e5f5cc0961ae79aafb261b1cd321f6938ec81ce5451c1c6b8c02c235d8ba5ce3cccccf06463286b3599cba9d04c42f2ac016cb2e8c71fccd2f24b1b8bfc0f3f1f09f91a525e40609486d508a4a32d573e7d43bd28fa573684f1e2dfc6f79a373a01feaa32928663c5d8d4f4951a749c97189bd1b3a9f9cb66b430c6a0162056fad01ab84469578d2cb1c8849c6158ec07aae147c2885ba6f662316a3196f3086a1253ed4147a916fc029a12b106c1b8af7f54161fe3369ef10ec0c999b244d52058e17f445f56730122d633aad219f2bc19471ca04bbb0a96c1375000b31e1793e37c39914f3b5d60749e1043a3fdd3def85767c6ffb52c1addc3784bfdd32cc429440ebd3675c035b25960d585996201b8d551c5b134ba4b03c56840d39246b6e2dc39a04e3a78a1ba7aa74203a7622c2eac772536bffd41122341470bfbd712a5b8dfece646599d2a845a39c39699bddb6b1fa147dd426985a5632992c3c4a8caf897ddd9a950a3dc48a3b37a056f779121ee230dd8f23817ae6e95d8b9a8a9e0063b87d4efa3633de5ac8f64b220c59d186f2c41564b44c4d08f3d85386ee5aa39b1998b3387835c897990ac90b1b4d23a42bfe63182cb8f44f14fe2faedda98a9f7854c192d66d466d2ecdb8ccda8fd7e237cb1c6e663b5a5f9a90fb5abd003a380b5b021bf67b9d85c5129ebb2c11866fa335fcecf2d2144312716fdfff0de8e9208bfc894671e4c77fc11e58ad181b62bba9023e26ceeee6d15d98058cfa77242b94618576281e98792e5e5070b20293bed47db52a248d1d0ab1bff1bbcb60feaf6d79526828d0bcc1f0c7bc7a39078b101b1c8a087c6673a8178a904f91a9c012a98e27d04cb4772a538fbfcb13a994cf9afa06210d00fa63f5948322c449186415b791e9bf3b17eaae8cb55aa0692ff02a7a1c2a5ae4961a89e93d13acea77abd7ca1ead229dd75225aec76ec296762bbe0c1c879763c40612ad3cab3b37c6ce5364a075b9073da1bb48f81f6667a5d918f078fd1979b06f91d22879dc3b5b28cd44ee3a83c4a425af1ebcd46c14b661901671811992419e3442255d524f5b841ec76cac1b733f537e8dfad7f54f4ae753f4eb9a327e7d63a30e715e3b2f0fa7b110335054312994f2fcc3c6216b4129e6450bf2899e1ea3ab10d78fa8759ca7b28a53bc73059158498efde04042dc6eabc03b004560547c9e2294ff0e79f25e787720e62e1274cc02adababdde7c61c26f432d70ca339856477fb2df8d74399b2428521c9b7741a9d6cb6450c8cbb6cd0148ca20bf45088a96bfde0b62d67fd558f14eed3a0873354f2841aca5de58c28abf1b70779cf717e62f9531d4b1454c654165a4b229ffba768a5b6bd5a1af7abe38721ef9ff09b2d56d2971fca2023281327abdb7442a6bab3de814b622e203d31f83b878bb77c79360c1778072e4f15c88fa749b02b4b683f5e7280f77b59e736f324a16b873e822d6aa46194c79ea9e6ca59e09fad4b1c6fe800351d67dbc31f766faab3ccb98f4cb9c3015a769d2c013c87900f633142663de8161819d1a49e7c25d1b71703c7298e0ac92a63686a3406ace50de0159af7d0ac1b70359b61b69eeed414e3d1640839a52301125b7eac6b5bf6a51c67e3b4e8ad308b951816676ca9afe6c126da8e2782a50b3b29e5237db573c8b5405066e637e7413e831adf98905546499ebde54216c48a708e1a507b3e6b7fa322013d2d0cfdb21aae4fcc76245a458595902a8a6a00d6be30af3dcc475d07899e27e3b172014ebb4b9e453d828f728ecb8ff7c78a6bc30e05ea5cdf1bd85fdedd2b41a5cfadee33ed5c3150260b0eb73df9a5eb9aaa47c5cebe88acad2bdf0d43867b4cd10c076edf8e21e3e4d2910e3f1d44e9c53c9146341fb15afa334ed97cd84c2125d8b7bc07b39e835519d1ae977367c3", @typed={0x4, 0x62}, @generic="5a1312b65c55cf382b627084240b550bdb2a18e6ac9406f220fea8d6ce27cf5b11652bf9a0899ef4f91549c777ba449023cc3347a26a24e0ae413f0bb5d86f68c48279e6e92124c316c8445463e466f4b1d9a0b6fb3ac5c6a3c9124b4c69911ffd8aa796834c2788e1a404079afc6b26e3404bcdf1d4ee3fdbcf602201466f97f6bb42"]}, @generic="ad90330a25c367a0694c10dbb233102217a5e2be141291e8504f36b1dc13e794a7d05c3f2494c21bc243fa41738b9c48aa0a5fa59f5ca8f4c43f71b2"]}, 0x35fc}, 0x1, 0x0, 0x0, 0x5}, 0x80) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f0000000080)={0xfffffff7, 0x100, 0x7, 0x7f, 0x2, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c65000000000000ad00000000000000000000000000000000000ece305ce283ba4bdaf4ac7e92ede34ff0507cf200328407edd28da81436b9d771ff6797335e1832cd5321e2118b9eea"], &(0x7f0000000000)=0x5a) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r7) 21:45:09 executing program 3: creat(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:10 executing program 3: creat(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2147.119916][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2147.189324][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:10 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) [ 2147.288416][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2147.300588][ T8627] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0xe8, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x42}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r3, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r7 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r7, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) dup2(r7, r6) 21:45:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a6003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000006000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2147.499865][ T8683] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:45:10 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2147.638339][ T8683] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2148.219375][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2148.782791][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.268250][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.281112][ T8701] __nla_validate_parse: 4 callbacks suppressed [ 2149.281123][ T8701] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00500003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'gretap0\x00', 0x400}) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) 21:45:12 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d07b30003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d001206000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:12 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:12 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:12 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2150.062123][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) r6 = dup3(r0, r1, 0x0) r7 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r7, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) fcntl$getown(r7, 0x9) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='\x00', r4}, 0x10) dup2(r6, r5) [ 2150.205796][ T8766] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2150.251624][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a6803000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:13 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) [ 2150.313916][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000)=0x80000001, 0x4) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000000)={@remote, @private=0xa010102, @multicast2}, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000080)={0x5d, &(0x7f0000000200)="3c5e1b60099bed42397b38c583bf9fbf232a5f27bd79e909e481c6ee4729875903c3f109e852de0d052c0965b359fbb1549353ad466d4f2e7a62f3faab50ca8142a5c95515f717af0bdf106239478279ed01ea3f73b72fa20f907e49328cfae8ad91fc6d6e28eba24ae32fbe8fb7436a00c904cad259cfaaa4739324f8661efc099f378c8dc382c9ab7732f90a9568c5b440f2dbd1f685dcbf53b752e727a2e9b3173c00079ee96968d09c5564596991eabc25dc0ba7863fbf80e28e42cc80171b3daeab31bf7d97598d449dbf4e0a58eb3997acea6bab89a6dafea332da7110b66e5e79"}) [ 2150.605940][ T8846] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2151.079297][ T8779] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2151.337354][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.783420][ T8782] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2151.817553][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.247264][ T8844] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000007000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d58570003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:15 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d07c30003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0x8001, 0x0, 0xe, 0x3, 0x0, "bd82e4b5521370386078bba67fc4f2245f0ad2e82819000001000000000053ec18d9ccd1d700ead488ac31fbd0f5bc8f8f6d427bbc85bdff90864adb85770758", "60da09c44cb05e6aa64f8232e51eea24e5ce051c4809fe01b949167f1f83f21be6ab8c219a7d5085c5550835eb9f1f1a08b9d7076d408c48cd0558798f0a2a7f", "71761b2f93f901f7d7c1db7b13f86131000800000000000081c20e00", [0xd468, 0x2]}) r9 = dup3(r0, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r6) [ 2152.377367][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:15 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:15 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:15 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2152.986551][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) [ 2153.167377][ T8896] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2153.170429][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a6c03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:16 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000009000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2153.344297][ T8950] warn_alloc: 3 callbacks suppressed [ 2153.344322][ T8950] syz-executor.5: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2153.419091][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2153.455782][ T8950] CPU: 0 PID: 8950 Comm: syz-executor.5 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2153.465625][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2153.475706][ T8950] Call Trace: [ 2153.475734][ T8950] dump_stack+0x18f/0x20d [ 2153.475755][ T8950] warn_alloc.cold+0x87/0x17a [ 2153.475783][ T8950] ? zone_watermark_ok_safe+0x260/0x260 [ 2153.494390][ T8950] ? wait_for_completion+0x260/0x260 [ 2153.494417][ T8950] __alloc_pages_slowpath.constprop.0+0x2197/0x2780 [ 2153.506269][ T8950] ? warn_alloc+0x120/0x120 [ 2153.510800][ T8950] ? fs_reclaim_release+0x94/0xf0 [ 2153.510821][ T8950] ? lock_is_held_type+0xb0/0xe0 [ 2153.510836][ T8950] ? find_held_lock+0x2d/0x110 [ 2153.510857][ T8950] __alloc_pages_nodemask+0x5a3/0x700 [ 2153.530899][ T8950] ? __zone_watermark_ok+0x3f0/0x3f0 [ 2153.530924][ T8950] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2153.542959][ T8950] ? lock_is_held_type+0xb0/0xe0 [ 2153.542980][ T8950] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2153.542996][ T8950] ? __alloc_pages_nodemask+0x5c5/0x700 [ 2153.543010][ T8950] ? rwlock_bug.part.0+0x90/0x90 [ 2153.543030][ T8950] alloc_pages_current+0x187/0x280 [ 2153.543050][ T8950] alloc_mmu_pages+0x7f/0x170 [ 2153.543065][ T8950] kvm_mmu_create+0x3cb/0x560 [ 2153.543083][ T8950] kvm_arch_vcpu_create+0x16d/0xb70 [ 2153.543104][ T8950] kvm_vm_ioctl+0x1547/0x23c0 [ 2153.543122][ T8950] ? lock_downgrade+0x820/0x820 [ 2153.543138][ T8950] ? kvm_unregister_device_ops+0x60/0x60 [ 2153.543158][ T8950] ? trace_hardirqs_on+0x5f/0x220 [ 2153.543172][ T8950] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2153.543190][ T8950] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2153.543206][ T8950] ? tomoyo_execute_permission+0x470/0x470 [ 2153.543232][ T8950] ? __might_fault+0x11f/0x1d0 [ 2153.626839][ T8950] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2153.626856][ T8950] ? do_vfs_ioctl+0x27d/0x1090 [ 2153.626877][ T8950] ? generic_block_fiemap+0x60/0x60 [ 2153.642717][ T8950] ? __might_fault+0x190/0x1d0 [ 2153.642735][ T8950] ? _copy_to_user+0x126/0x160 [ 2153.642756][ T8950] ? __fget_files+0x294/0x400 [ 2153.642779][ T8950] ? kvm_unregister_device_ops+0x60/0x60 [ 2153.642801][ T8950] ksys_ioctl+0x11a/0x180 [ 2153.666910][ T8950] __x64_sys_ioctl+0x6f/0xb0 [ 2153.666926][ T8950] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2153.666939][ T8950] do_syscall_64+0x60/0xe0 [ 2153.666956][ T8950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2153.666975][ T8950] RIP: 0033:0x45cb29 [ 2153.690802][ T8950] Code: Bad RIP value. [ 2153.690811][ T8950] RSP: 002b:00007f7038bbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2153.690825][ T8950] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29 [ 2153.690841][ T8950] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2153.719277][ T8950] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2153.719286][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2153.719294][ T8950] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f7038bbb6d4 21:45:16 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2154.156717][ T8950] Mem-Info: [ 2154.168172][ T8950] active_anon:145325 inactive_anon:33378 isolated_anon:0 [ 2154.168172][ T8950] active_file:5830 inactive_file:10629 isolated_file:0 [ 2154.168172][ T8950] unevictable:0 dirty:35 writeback:0 [ 2154.168172][ T8950] slab_reclaimable:87109 slab_unreclaimable:313392 [ 2154.168172][ T8950] mapped:60305 shmem:12389 pagetables:2309 bounce:0 [ 2154.168172][ T8950] free:906948 free_pcp:785 free_cma:0 21:45:17 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) [ 2154.298309][ T8905] __nla_validate_parse: 2 callbacks suppressed [ 2154.298322][ T8905] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2154.458445][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.536631][ T8950] Node 0 active_anon:539824kB inactive_anon:123648kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221472kB dirty:12kB writeback:0kB shmem:39784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB kernel_stack:9248kB all_unreclaimable? yes [ 2154.609153][ T8950] Node 1 active_anon:42076kB inactive_anon:9864kB active_file:23312kB inactive_file:42512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19648kB dirty:228kB writeback:0kB shmem:9772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:864kB all_unreclaimable? no [ 2154.687358][ T8950] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2154.747222][ T8950] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2154.752992][ T8950] Node 0 DMA32 free:89452kB min:87116kB low:96092kB high:105068kB reserved_highatomic:2048KB active_anon:539820kB inactive_anon:123648kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2578204kB mlocked:0kB pagetables:7456kB bounce:0kB free_pcp:1992kB local_pcp:1304kB free_cma:0kB [ 2154.857629][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.877160][ T8950] lowmem_reserve[]: 0 0 0 0 0 [ 2154.881882][ T8950] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2154.977134][ T8950] lowmem_reserve[]: 0 0 0 0 0 [ 2154.981955][ T8950] Node 1 Normal free:3524652kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:42076kB inactive_anon:9864kB active_file:23312kB inactive_file:42512kB unevictable:0kB writepending:276kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:1632kB bounce:0kB free_pcp:2132kB local_pcp:1404kB free_cma:0kB [ 2155.084051][ T8950] lowmem_reserve[]: 0 0 0 0 0 [ 2155.089230][ T8950] Node 0 DMA: 2*4kB (ME) 36*8kB (UM) 39*16kB (UM) 36*32kB (UM) 2*64kB (ME) 1*128kB (M) 3*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10264kB [ 2155.144436][ T8950] Node 0 DMA32: 1609*4kB (UMEH) 3043*8kB (UMEH) 1900*16kB (UMEH) 813*32kB (UME) 29*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 89052kB [ 2155.186489][ T8950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2155.226057][ T8950] Node 1 Normal: 1*4kB (U) 34*8kB (U) 4*16kB (UM) 1*32kB (E) 9*64kB (UM) 11*128kB (M) 8*256kB (ME) 23*512kB (UM) 8*1024kB (UM) 5*2048kB (UME) 852*4096kB (M) = 3524404kB [ 2155.243325][ T8903] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2155.295543][ T8950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2155.312747][ T8950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2155.325058][ T8950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2155.341926][ T8950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2155.355707][ T8950] 23526 total pagecache pages [ 2155.366782][ T8950] 0 pages in swap cache [ 2155.373242][ T8950] Swap cache stats: add 0, delete 0, find 0/0 [ 2155.384822][ T8950] Free swap = 0kB [ 2155.393442][ T8950] Total swap = 0kB [ 2155.415371][ T8950] 1965979 pages RAM [ 2155.436390][ T8950] 0 pages HighMem/MovableOnly [ 2155.448968][ T8950] 349901 pages reserved [ 2155.453904][ T8950] 0 pages cma reserved [ 2155.497421][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.505537][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.702235][ T8959] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00670003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00000a000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d07c40003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:18 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:19 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:19 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2156.496101][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2156.538188][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.691090][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2156.700782][ T9043] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a7403000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) fchdir(r6) dup2(r6, r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r8, 0xc004aea7, &(0x7f0000000000)=0x4) 21:45:19 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:20 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00000b000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000100)) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r7, r4) r8 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r8, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) fsetxattr(r8, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000080)='*\x00', 0x2, 0x2) [ 2157.540975][ T9050] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2157.577985][ T8101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2157.627685][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2157.705904][ T9131] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2157.897413][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2158.217702][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2158.321695][ T9051] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2158.627494][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d006e0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00f00003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:22 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000001dc0), &(0x7f00000021c0)=0x4) r5 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r6 = socket$kcm(0x11, 0x8000000000000003, 0x0) r7 = dup3(r4, r6, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002100)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="b315b3963cb97e026b0fa15fe4b3ab48e4f8ddd96e818bdd4675b184ad281e0d14beedb2e2db002688213b80eeadcde62183f29ed64c6b53baa866c9e092074ebe176b2bd8dc5671c04f79a64923231a191cd79eb365c98745e938b0c8b02d33c2344a8d66f84fd14e35d4eb43a4071bc857580fcecd733ef7e42bd2496c8141bb126ad4585f0aab200280e3ef62cbcc42353ca84befca8a0ab4ab731d68f4e6f4bfe0abf91622a898e85bfdc66ad27cf1445eb49946c3604312daa39b437ca95fc4f66952f73dd366ecb96778a94478485a3cc572ab", 0xd6}, {&(0x7f0000000200)="f457e245e6a6adc28abf7b90d703810cbf0c225a32cfee37ee9764006d921632a23dcbc1422320eabc985ba9279a3e63de05c29c888e7e98113a03d79c1702bf2e979997eb98220805cd0f528b44144db3cf1dde052175767538a2e5a72321dbaf4f9677a0b9bd2c2c2837b7f0058373c28826c36bc05f50eb1997d496b6739c57002f3bf1661f49fe4c3ee1d6a3285cfcfd7794693e851a2a123f52ce6167adedc48ef4061bf7b71bf9ed06995f7b85ca746894c5253ccac23e320e399351c875dd9b30650c8eeca0352d61d22b4869ee3180704f4998bf8b9a6bea339c32", 0xdf}, {&(0x7f0000000300)="5fd6a1ab391ef9337c2925f2d651fab5d6b1a3903d00f1aafbfa8e882ad25d71578c", 0x22}, {&(0x7f0000000340)="263f99abbb91fcd4e353ce308401ce606f32b19ce662ac899969e40037c85d01f09d9daa3690aba762eff5f6d803d4783cb6cb30f6ef4dfac4149f1564609d85f7e6a74ee908372a63c809a725ce21498569d21d7c105b1607e19b7e83175f82dde5829c391d6f5894abff66a15a68b4dc820a063cab5db48ff3ff700fac42747403825551539921833eb7e4e3e7394b1726d7bac06cb4e99e0d81ab9fb3", 0x9e}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x150}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000440)="edc87caac39c3e74cf98d87fe453f5801968a3e271c03ff55fdcac1258c0bcfb64cf6ccec2aec6d8", 0x28}, {&(0x7f0000000480)="7157192673c924f70220bf3653b66d2f1933626f239e36df496acec4a1b1d82b0ce66c1fd574908a64109ba917e9b42fe461c3676faf0e8e9dd43cee56021e0bee72c7c6e6dc51098f49b7c6cd85f5b90f373be211a74db9bac8dd4f3bb54a93543e4d1643634879ca7b5de3d042e96f124434ca92ad24e82d1aacb05f951159d5083b2c47ff2579e067aaf6c0d86aedeb2e515b2beb1685e1ccc6a1092bd2ba13", 0xa1}, {&(0x7f0000000540)="54f5330f1e8014b5739691efc84e", 0xe}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="fb4ad3db1c6bcc3ad77252eab2de005266d31acaa91dc6639125dd3372069fd1bf41d81bac2781b5f99cfa0cc04563091190ab233d07cd7eb4249d4234e17f4d3c0a72fcb1934d118afbffdbc1193327968e945596e77dd199041a989ae5e6e6a77aeb713785150b801e30b37502af7749b44217f005e50eb39489a09a12dcd2d9e849d4fedffa6605b30716a2f1223f123242b754e75ff93ee6fc038ee94c6d706f12f8b0f9ce692791a86008d646eb37e3ff01591ff559af8c1ec96f9cb7e96a0074a4851bf09f05f5d0bd2275fd7d01f2dfd7b1a71ebe", 0xd8}, {&(0x7f0000001c00)="dc01bbcdb72e23ce42c38e56df31fb92d41c8771fca1441e5c3fadc1b4e7ee48516e850f59af6e7b04714d843492f4fc957bbed0f120b77e3113dcedad529a23574a0866286d727624a8fd778e5ee6223dc2abc52d5633182810ae5da57a6f1e1c2ddada60248264fc703ecfee57a45df70edb1752eecceab90dde4e455a0abd4ab9ef8cce854d1e5339d7e19fb577dc2b371ec2120209d8ea1c077be8e8513e9c413fbd2a8c96de5fc1c52171d9aa", 0xaf}], 0x6, &(0x7f0000001d40)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18}, @op={0x18}], 0x48, 0x81}, {0x0, 0x0, &(0x7f0000001dc0), 0x0, &(0x7f0000001e00)=[@op={0x18}, @iv={0xf0, 0x117, 0x2, 0xd8, "e5a5b411c6b8167e436b64cb0fbc447ac354ba2a6af7d642ffdcbfbc471855308ebdb956282e1446053f98002d41a95ec68c7c8944a3936b7f28ce57a38471ed123a4e99efbd732ec092206d489689b3680c9aee6393232d4414b29392e81919526bb9c2245348350f208d75b7f64244e4b7264f13b816964a295b2284ddd8ad11aed04c849749d0e9c614ef970d0b5eb6d7fad4f3282531b432145dbb717aa30594c279d9502490f690c533b4139dc1a70724da1926b7acf57028ba41f3a19f17c870003b72c493ab4f31d6ef8154db2484119dbd7485e3"}, @iv={0xf8, 0x117, 0x2, 0xe2, "a549ceba37b91b668f44d69576ec25a5a8a8a555a29bb7a9411924cd44d43c2478aaa4c4a5d97c7a0599a82ac7a9ceab75132517c1491d2bc91d46d64731b96e134258718691b45a9f381e8c5fe39aef9c8e21019e058d9cb3bc2ee11c5ca731ba404073ec151a74dc838289906f0d121bc514f484e5c3341d02164f1b8ec8696659807a89b4c22c9047131f41f7b3b06a7cfce88dbdd786aa622a4919f331968af2b9e8221c955e440ea304c6724ce429d9b300a7efd43c272cb693dca4064d85ec385229baf685bc89db166d8323b724b66ae0f6a876e246ae6c442026724e9625"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x58, 0x117, 0x2, 0x3f, "798fe2af6518c3bfc5e78f9958e7d06efbf70345b46d0334326f4238e4a3ff8bd9bd056e511f342959367d9b7af36dfb00bdfa96713f5ca996f886732e8b8e"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x2e8}], 0x3, 0x8080) dup2(r7, r4) r8 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x1, 0x1) ioctl$HIDIOCGNAME(r8, 0x80404806, &(0x7f0000000080)) 21:45:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00000c000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:22 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2159.590836][ T9189] __nla_validate_parse: 1 callbacks suppressed [ 2159.590847][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2159.657406][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.752176][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2159.754504][ T9186] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a7a03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:22 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x15, 0xa, 0x801, 0x0, 0x0, {0x1fce3a1c77262189, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x50) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) 21:45:23 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:23 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00000e000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2160.671737][ T9193] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2160.697416][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2160.715485][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2160.938337][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.253935][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2161.254786][ T9243] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2161.737593][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.842866][ T9184] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00780003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) mq_unlink(&(0x7f0000000000)='#}-\xf9(*(.\xa5-\xb1-!$[\x00') r3 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r3, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) 21:45:25 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00030003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00000f000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0006000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2162.412078][ T9316] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 2162.414669][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2162.452244][ T9316] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:25 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2162.549414][ T9321] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:45:25 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2162.787605][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:26 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:26 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000011000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r4}}, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) [ 2163.818427][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2163.977384][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2164.763256][ T9334] __nla_validate_parse: 5 callbacks suppressed [ 2164.763267][ T9334] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2164.857540][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.106580][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d07b50003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0007000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:28 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2, 0x401}], 0x2, 0x0) r4 = dup3(r3, r1, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) dup2(r7, r6) 21:45:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000c0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000012000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2165.294438][ T9430] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2165.314238][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:28 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2165.463178][ T9443] warn_alloc: 3 callbacks suppressed [ 2165.463202][ T9443] syz-executor.5: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2165.567805][ T9443] CPU: 1 PID: 9443 Comm: syz-executor.5 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2165.577645][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.587710][ T9443] Call Trace: [ 2165.591022][ T9443] dump_stack+0x18f/0x20d [ 2165.595372][ T9443] warn_alloc.cold+0x87/0x17a [ 2165.600099][ T9443] ? zone_watermark_ok_safe+0x260/0x260 [ 2165.605678][ T9443] ? wait_for_completion+0x260/0x260 [ 2165.610997][ T9443] __alloc_pages_slowpath.constprop.0+0x2197/0x2780 [ 2165.617653][ T9443] ? warn_alloc+0x120/0x120 [ 2165.622178][ T9443] ? fs_reclaim_release+0x94/0xf0 [ 2165.627255][ T9443] ? lock_is_held_type+0xb0/0xe0 [ 2165.632225][ T9443] ? find_held_lock+0x2d/0x110 [ 2165.637024][ T9443] __alloc_pages_nodemask+0x5a3/0x700 [ 2165.642412][ T9443] ? __zone_watermark_ok+0x3f0/0x3f0 [ 2165.647715][ T9443] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2165.654491][ T9443] ? lock_is_held_type+0xb0/0xe0 [ 2165.659450][ T9443] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2165.665005][ T9443] ? __alloc_pages_nodemask+0x5c5/0x700 [ 2165.670574][ T9443] alloc_pages_current+0x187/0x280 [ 2165.675704][ T9443] alloc_mmu_pages+0x7f/0x170 [ 2165.680398][ T9443] kvm_mmu_create+0x3cb/0x560 [ 2165.685090][ T9443] kvm_arch_vcpu_create+0x16d/0xb70 [ 2165.690320][ T9443] kvm_vm_ioctl+0x1547/0x23c0 [ 2165.695011][ T9443] ? lock_downgrade+0x820/0x820 [ 2165.699878][ T9443] ? kvm_unregister_device_ops+0x60/0x60 [ 2165.705551][ T9443] ? trace_hardirqs_on+0x5f/0x220 [ 2165.710604][ T9443] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2165.715732][ T9443] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2165.721382][ T9443] ? tomoyo_execute_permission+0x470/0x470 [ 2165.727206][ T9443] ? __might_fault+0x11f/0x1d0 [ 2165.731986][ T9443] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2165.737892][ T9443] ? do_vfs_ioctl+0x27d/0x1090 [ 2165.742662][ T9443] ? generic_block_fiemap+0x60/0x60 [ 2165.748741][ T9443] ? __might_fault+0x190/0x1d0 [ 2165.753520][ T9443] ? _copy_to_user+0x126/0x160 [ 2165.758301][ T9443] ? __fget_files+0x294/0x400 [ 2165.763074][ T9443] ? kvm_unregister_device_ops+0x60/0x60 [ 2165.768722][ T9443] ksys_ioctl+0x11a/0x180 [ 2165.773064][ T9443] __x64_sys_ioctl+0x6f/0xb0 [ 2165.777674][ T9443] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2165.782801][ T9443] do_syscall_64+0x60/0xe0 [ 2165.787227][ T9443] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2165.793133][ T9443] RIP: 0033:0x45cb29 [ 2165.797039][ T9443] Code: Bad RIP value. [ 2165.801109][ T9443] RSP: 002b:00007f7038bbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2165.809532][ T9443] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29 21:45:28 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2165.817519][ T9443] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2165.825506][ T9443] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.833496][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2165.841510][ T9443] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f7038bbb6d4 [ 2165.908336][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:29 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2166.371682][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:29 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000612000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2166.528146][ T9433] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a000c000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2166.645078][ T9443] Mem-Info: [ 2166.670737][ T9443] active_anon:146254 inactive_anon:33394 isolated_anon:0 [ 2166.670737][ T9443] active_file:5830 inactive_file:10647 isolated_file:0 [ 2166.670737][ T9443] unevictable:0 dirty:58 writeback:0 [ 2166.670737][ T9443] slab_reclaimable:87382 slab_unreclaimable:314648 [ 2166.670737][ T9443] mapped:60328 shmem:12424 pagetables:2289 bounce:0 [ 2166.670737][ T9443] free:904258 free_pcp:638 free_cma:0 [ 2166.819816][ T9443] Node 0 active_anon:539800kB inactive_anon:123648kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221564kB dirty:12kB writeback:0kB shmem:39784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB kernel_stack:9216kB all_unreclaimable? yes [ 2166.890260][ T9443] Node 1 active_anon:45316kB inactive_anon:9928kB active_file:23312kB inactive_file:42584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19748kB dirty:220kB writeback:0kB shmem:9912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB kernel_stack:960kB all_unreclaimable? no [ 2166.944622][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.975063][ T9443] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.017765][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2167.038865][ T9443] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2167.057720][ T9443] Node 0 DMA32 free:91240kB min:89164kB low:98140kB high:107116kB reserved_highatomic:2048KB active_anon:539796kB inactive_anon:123648kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2578204kB mlocked:0kB pagetables:7456kB bounce:0kB free_pcp:1036kB local_pcp:292kB free_cma:0kB [ 2167.181940][ T9443] lowmem_reserve[]: 0 0 0 0 0 [ 2167.198363][ T9443] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.243370][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2167.297884][ T9443] lowmem_reserve[]: 0 0 0 0 0 [ 2167.313682][ T9443] Node 1 Normal free:3515840kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:45316kB inactive_anon:9928kB active_file:23312kB inactive_file:42584kB unevictable:0kB writepending:220kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:1700kB bounce:0kB free_pcp:1352kB local_pcp:840kB free_cma:0kB [ 2167.386356][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2167.389380][ T9446] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2167.503471][ T9443] lowmem_reserve[]: 0 0 0 0 0 [ 2167.520520][ T9443] Node 0 DMA: 2*4kB (ME) 36*8kB (UM) 39*16kB (UM) 36*32kB (UM) 2*64kB (ME) 1*128kB (M) 3*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10264kB [ 2167.622681][ T9443] Node 0 DMA32: 1544*4kB (UMH) 3035*8kB (UMH) 1984*16kB (UMEH) 843*32kB (UM) 30*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 91096kB [ 2167.665604][ T9443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2167.704239][ T9443] Node 1 Normal: 157*4kB (UME) 81*8kB (UME) 58*16kB (UME) 15*32kB (UME) 9*64kB (UME) 14*128kB (UM) 8*256kB (ME) 13*512kB (UME) 9*1024kB (UME) 4*2048kB (UM) 851*4096kB (M) = 3516860kB [ 2167.761201][ T9443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.796041][ T9443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.814775][ T9443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.846227][ T9443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.873172][ T9443] 23584 total pagecache pages [ 2167.890535][ T9443] 0 pages in swap cache [ 2167.900455][ T9443] Swap cache stats: add 0, delete 0, find 0/0 [ 2167.932938][ T9443] Free swap = 0kB [ 2167.944524][ T9443] Total swap = 0kB [ 2167.964308][ T9443] 1965979 pages RAM [ 2167.973936][ T9443] 0 pages HighMem/MovableOnly [ 2167.986011][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2168.004624][ T9443] 349901 pages reserved [ 2168.020159][ T9443] 0 pages cma reserved [ 2168.142352][ T9440] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d07c40003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:31 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000d0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000013000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = dup3(r0, r1, 0x0) getsockname$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r8, r5) [ 2168.509236][ T9509] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 2168.523198][ T9509] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a000e000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) r5 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x8000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000080)={0x3, r7}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r8, r4) 21:45:31 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2169.028251][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:32 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r1) 21:45:32 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00003f000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2170.041359][ T9642] __nla_validate_parse: 3 callbacks suppressed [ 2170.041370][ T9642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2170.059319][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.085756][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.217257][ T9580] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2170.234395][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d07c50003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000e0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:34 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) r4 = dup3(r3, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x1, {0x2, 0x1, 0x2}, {0x0, 0xf0, 0x2}, 0xfd, 0xfe}, {0x2, 0x2, {0x2, 0x1}, {0x2, 0x1, 0x1}, 0xfd, 0x101}, {0x3, 0x1, {0x1, 0x1, 0x3}, {0x1, 0x1, 0x1}}, {0x0, 0x0, {0x1, 0xff, 0x1}, {0x1, 0xff}, 0x1}, {0x3, 0x0, {0x1, 0x1, 0x4}, {0x0, 0x0, 0x1}, 0x1, 0x6}, {0x2, 0x0, {0x0, 0x1, 0x2}, {0x1, 0xff, 0x1}, 0xfd}, {0x2, 0x1, {0x1, 0x1}, {0x0, 0xff, 0x1}, 0x2, 0xff}, {0x0, 0x0, {0x1, 0xf0, 0x4}, {}, 0x1fb, 0xfe}], 0x100) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bind$phonet(r6, &(0x7f0000000000)={0x23, 0x7, 0xfa, 0x2e}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r7, r4) 21:45:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0018000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000040000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2171.114614][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.170474][ T9690] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2171.222893][ T9694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:34 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}], 0x1, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x4010) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000401000000000000000000000000000001001c00fbff"]) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 21:45:34 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}], 0x1, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:34 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}], 0x1, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2171.962626][ T9694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2172.095144][ T9693] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2172.121052][ T9703] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2172.137893][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000054000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000), 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) [ 2172.643747][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2172.750993][ T9697] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2173.098388][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.178060][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00f00003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00100003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:36 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {0xffffffffffffffff, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0028000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) r7 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r6}}}], 0x20}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x81}, 0x8) setfsgid(r6) 21:45:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d006558000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2173.442035][ T9823] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:45:36 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {0xffffffffffffffff, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r3, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX, @ANYBLOB="0100"/22], 0x1c}}, 0x8000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2d0d26bd7000fcdbdf25070000001400040073797a5f74756e0000000000000099000000000502009900090000000400"/62], 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010028bd7000f9d1df251f1000000400cc0008009a0000000000060021006100000008009a00010000000400cc000400cc0006002100610000000700210003000000080001000300000008009a0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x890}, 0x810) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x40804}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f0000000300)={0xffff7ffd, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r7, r6) 21:45:36 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {0xffffffffffffffff, 0x401}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:37 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2174.217750][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000060000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00140003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2174.697490][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.267542][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.557199][ T9840] __nla_validate_parse: 8 callbacks suppressed [ 2175.557211][ T9840] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2176.073159][ T9898] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00030003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:39 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a003f000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d005865000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2176.143622][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2176.301293][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:39 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3}], 0x1, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:39 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3}], 0x1, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2176.954512][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:39 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3}], 0x1, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2177.105102][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2177.127030][ T9958] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2177.347940][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2177.786553][ T9962] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2178.297243][ T9960] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendto$l2tp6(r4, &(0x7f0000000100)="8a81d34ead14bb3cd2695871fda6e577b935f8181bfea2b9053c032e781dfdc0030804c16c70ae09e4770056d295c7e131d129f8bc7fffc612623a2d9728396566e6b6ade099ecd2e0336d19e5139693db0d15c5d8679f3f743f80ad3776fc6b6f93214d44b54b18e84390c780e6b5f0a388dbd075a356392ef508d547ae4568efe12e8cfd5cf762d5d96734cbedcd462bc63a806f7e1ce14fb05bdbbaee448c2953dd0e06b2ccafba6d961fad6dee3f7715a46e3306039af86e140d", 0xbc, 0x20040854, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r5) 21:45:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00250003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000081000000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:41 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0002000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2178.401835][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2178.589735][T10050] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2179.028303][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2179.188133][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.234331][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2179.245682][T10040] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000c0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:42 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400202) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setregid(0x0, 0x0) r4 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r5, 0x0, 0x9, &(0x7f0000000080)='/dev/kvm\x00', r7}, 0x30) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r8) 21:45:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000100000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2179.419950][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.464971][T10092] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:45:42 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', r5}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r4) 21:45:42 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) [ 2179.982875][T10123] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:45:43 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:43 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00280003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2180.476789][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:43 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x804040, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x48, r7, 0xd2d, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5000000, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x884) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r8, r3) 21:45:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000200000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2180.934461][T10167] __nla_validate_parse: 3 callbacks suppressed [ 2180.934473][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2181.024709][T10098] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:44 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x80000) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2181.078595][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2181.512487][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.780850][T10101] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2182.219719][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000d0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0004000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:45 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000300000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2182.456460][T10160] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2182.536684][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2182.550372][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.616928][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:45 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:45 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:46 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2}], 0x2, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:46 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2}], 0x2, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) [ 2183.447657][T10229] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2183.458167][T10229] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00370003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2183.581422][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000400000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:46 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2}], 0x2, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:46 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = shmget$private(0x0, 0x200000, 0x0, &(0x7f000000a000/0x200000)=nil) shmat(r3, &(0x7f0000feb000/0x1000)=nil, 0x5000) r4 = shmget$private(0x0, 0x200000, 0x0, &(0x7f000000a000/0x200000)=nil) shmat(r4, &(0x7f0000feb000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/222) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000200)) r6 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001640), 0xff5f) dup2(0xffffffffffffffff, r5) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "065bdee051e3a13a"}, 0x10}, 0x1, 0x0, 0x0, 0x4004012}, 0x8ee05b3d2bdd402f) [ 2184.200757][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2184.307344][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.324909][T10288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2184.623046][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.266964][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000e0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:48 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0006000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x804040, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x48, r9, 0xd2d, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5000000, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r9, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_SEQ={0xe, 0xa, "c6d8078a8e97850dff3a"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "4c4bce57ed5e812ea6982d5876299bc2"}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0844}, 0x8000) 21:45:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000500000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2185.657818][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:48 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:49 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:49 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) dup3(r4, r2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2186.384066][T10365] __nla_validate_parse: 1 callbacks suppressed [ 2186.384079][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2186.601292][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2186.635455][T10362] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 2186.646740][T10362] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2186.707951][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d003c0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:49 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) dup3(r4, r2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:45:50 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) dup3(r4, r2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf0e993cdb3817b5588e2ef40b6abba18b43529500185fcecea6aff02270e4552fc782d8f098c14647006fa56b4d1c63ede5c79eb12bfb621558331a72e1449012"], 0xf2) 21:45:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000600000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2187.415019][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2187.424512][T10367] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2187.527417][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2187.740591][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.127420][T10361] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2188.303309][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.656332][T10429] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:45:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00100003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:51 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, 0x0, 0xf2) 21:45:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0007000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000700000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r7, r6) [ 2188.780385][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:51 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, 0x0, 0xf2) 21:45:52 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, 0x0, 0xf2) [ 2189.274411][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000980)={"6cdd4237dd245c8404721efdc9c8dc1964125f9b6fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897438d4b755cb783978d9859b0537b05b623dcb5c4ca9317471840fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734cdf7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b51321ec004525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84e15ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068f4809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r7 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r7, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2189.425739][T10501] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 21:45:52 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d006e0003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:52 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[], 0xf2) 21:45:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000800000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:52 executing program 5: r0 = socket$inet6(0xa, 0x2000000080803, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8cf279b50846abf2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, {0x0, 0x0, 0x200000000000000, 0x8000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) eventfd(0x400) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r1, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r3) [ 2189.819655][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2189.931900][T10573] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2190.869233][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2191.337575][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2191.496345][T10505] __nla_validate_parse: 5 callbacks suppressed [ 2191.496356][T10505] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2191.903640][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = getpid() sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r5}}}], 0x20}, 0x0) ptrace$getregset(0x4204, r6, 0x1, &(0x7f0000000000)={&(0x7f0000000100)=""/164, 0xa4}) r7 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r8) 21:45:54 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[], 0xf2) 21:45:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00140003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0008000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00770003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000900000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2192.047953][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2192.059004][T10641] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2192.181349][T10648] warn_alloc: 9 callbacks suppressed [ 2192.181371][T10648] syz-executor.5: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1 21:45:55 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[], 0xf2) [ 2192.246554][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2192.336344][T10648] CPU: 1 PID: 10648 Comm: syz-executor.5 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2192.346262][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2192.356340][T10648] Call Trace: [ 2192.359644][T10648] dump_stack+0x18f/0x20d [ 2192.363995][T10648] warn_alloc.cold+0x87/0x17a [ 2192.368684][T10648] ? zone_watermark_ok_safe+0x260/0x260 [ 2192.374248][T10648] ? wait_for_completion+0x260/0x260 [ 2192.379553][T10648] __alloc_pages_slowpath.constprop.0+0x2197/0x2780 [ 2192.386170][T10648] ? warn_alloc+0x120/0x120 [ 2192.390680][T10648] ? fs_reclaim_release+0x94/0xf0 [ 2192.395714][T10648] ? lock_is_held_type+0xb0/0xe0 [ 2192.400681][T10648] ? find_held_lock+0x2d/0x110 [ 2192.405458][T10648] __alloc_pages_nodemask+0x5a3/0x700 [ 2192.410833][T10648] ? __zone_watermark_ok+0x3f0/0x3f0 [ 2192.416123][T10648] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2192.422888][T10648] ? lock_is_held_type+0xb0/0xe0 [ 2192.427855][T10648] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2192.433407][T10648] ? __alloc_pages_nodemask+0x5c5/0x700 [ 2192.438956][T10648] ? rwlock_bug.part.0+0x90/0x90 [ 2192.443904][T10648] alloc_pages_current+0x187/0x280 [ 2192.449026][T10648] alloc_mmu_pages+0x7f/0x170 [ 2192.453708][T10648] kvm_mmu_create+0x3cb/0x560 [ 2192.458395][T10648] kvm_arch_vcpu_create+0x16d/0xb70 [ 2192.463598][T10648] kvm_vm_ioctl+0x1547/0x23c0 [ 2192.468283][T10648] ? lock_downgrade+0x820/0x820 [ 2192.473148][T10648] ? kvm_unregister_device_ops+0x60/0x60 [ 2192.478812][T10648] ? trace_hardirqs_on+0x5f/0x220 [ 2192.483845][T10648] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2192.488963][T10648] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2192.494607][T10648] ? tomoyo_execute_permission+0x470/0x470 [ 2192.500453][T10648] ? __might_fault+0x11f/0x1d0 [ 2192.505228][T10648] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2192.511124][T10648] ? do_vfs_ioctl+0x27d/0x1090 [ 2192.515910][T10648] ? generic_block_fiemap+0x60/0x60 [ 2192.521114][T10648] ? __might_fault+0x190/0x1d0 [ 2192.525882][T10648] ? _copy_to_user+0x126/0x160 [ 2192.530660][T10648] ? __fget_files+0x294/0x400 [ 2192.535370][T10648] ? kvm_unregister_device_ops+0x60/0x60 [ 2192.543435][T10648] ksys_ioctl+0x11a/0x180 [ 2192.547862][T10648] __x64_sys_ioctl+0x6f/0xb0 [ 2192.552454][T10648] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2192.557571][T10648] do_syscall_64+0x60/0xe0 [ 2192.562000][T10648] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2192.567896][T10648] RIP: 0033:0x45cb29 [ 2192.571785][T10648] Code: Bad RIP value. [ 2192.575849][T10648] RSP: 002b:00007f7038bbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2192.584266][T10648] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29 [ 2192.592239][T10648] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000007 [ 2192.600207][T10648] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2192.608209][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2192.616184][T10648] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f7038bbb6d4 [ 2192.703545][T10648] Mem-Info: [ 2192.706889][T10648] active_anon:150787 inactive_anon:33431 isolated_anon:0 [ 2192.706889][T10648] active_file:5832 inactive_file:10665 isolated_file:0 [ 2192.706889][T10648] unevictable:0 dirty:40 writeback:0 [ 2192.706889][T10648] slab_reclaimable:88373 slab_unreclaimable:315807 [ 2192.706889][T10648] mapped:60325 shmem:12493 pagetables:2253 bounce:0 [ 2192.706889][T10648] free:897562 free_pcp:1208 free_cma:0 21:45:55 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0xf2) [ 2192.921901][T10648] Node 0 active_anon:545176kB inactive_anon:123664kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221652kB dirty:8kB writeback:0kB shmem:39816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB kernel_stack:9216kB all_unreclaimable? yes [ 2192.958336][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.035246][T10648] Node 1 active_anon:57972kB inactive_anon:10060kB active_file:23320kB inactive_file:42656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19648kB dirty:152kB writeback:0kB shmem:10156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:864kB all_unreclaimable? no [ 2193.133684][T10648] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 21:45:56 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0xf2) [ 2193.274728][T10648] lowmem_reserve[]: 0 2515 2515 2515 2515 21:45:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000a00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2193.330984][T10648] Node 0 DMA32 free:54024kB min:52300kB low:61276kB high:70252kB reserved_highatomic:2048KB active_anon:545172kB inactive_anon:123664kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2578204kB mlocked:0kB pagetables:7456kB bounce:0kB free_pcp:2144kB local_pcp:1052kB free_cma:0kB [ 2193.438961][T10646] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 2193.463050][T10648] lowmem_reserve[]: 0 0 0 0 0 [ 2193.474306][T10657] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:56 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00780003000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2193.495531][T10648] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2193.505197][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a000c000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2193.624636][T10648] lowmem_reserve[]: 0 0 0 0 0 [ 2193.631149][T10648] Node 1 Normal free:3526584kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:58200kB inactive_anon:10064kB active_file:23320kB inactive_file:42680kB unevictable:0kB writepending:300kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:1488kB bounce:0kB free_pcp:1988kB local_pcp:976kB free_cma:0kB [ 2193.745515][T10648] lowmem_reserve[]: 0 0 0 0 0 [ 2193.762845][T10648] Node 0 DMA: 2*4kB (ME) 36*8kB (UM) 39*16kB (UM) 36*32kB (UM) 2*64kB (ME) 1*128kB (M) 3*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10264kB [ 2193.821111][T10648] Node 0 DMA32: 30*4kB (UMH) 1579*8kB (UMEH) 1438*16kB (UMEH) 565*32kB (UME) 15*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54800kB [ 2193.871307][T10648] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2193.897518][T26097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.910107][T10648] Node 1 Normal: 66*4kB (UME) 21*8kB (ME) 42*16kB (UM) 583*32kB (UME) 165*64kB (UME) 41*128kB (UM) 15*256kB (UE) 7*512kB (UE) 3*1024kB (U) 1*2048kB (U) 849*4096kB (M) = 3525616kB [ 2193.950414][T10648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2193.979301][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.987721][T10648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2194.012175][T10648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2194.033149][T10648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2194.055969][T10648] 23676 total pagecache pages [ 2194.074095][T10648] 0 pages in swap cache [ 2194.084098][T10648] Swap cache stats: add 0, delete 0, find 0/0 [ 2194.099295][T10648] Free swap = 0kB [ 2194.112644][T10648] Total swap = 0kB [ 2194.127552][T10648] 1965979 pages RAM [ 2194.143099][T10648] 0 pages HighMem/MovableOnly [ 2194.159248][T10648] 349901 pages reserved [ 2194.171310][T10648] 0 pages cma reserved 21:45:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x103080, 0x0) recvmsg$kcm(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/155, 0x9b}], 0x4}, 0x20) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r4) 21:45:57 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0xf2) [ 2194.359538][T10712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2194.378191][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.560896][T10662] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2195.027701][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00250003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:45:58 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57"], 0xf2) 21:45:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000b00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x80080400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000100)={0x101, 0x6}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r8) [ 2195.302125][T10715] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2195.429125][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:58 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57"], 0xf2) 21:45:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x48000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r7, r6) 21:45:58 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57"], 0xf2) [ 2196.063926][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:45:59 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2196.315352][T10723] netlink: 'syz-executor.1': attribute type 12 has an invalid length. 21:45:59 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00790003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a000e000200008037153e370a", 0x25}], 0x1}, 0x0) 21:45:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000c00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:45:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4000, 0x0) recvmsg$can_raw(r6, &(0x7f0000000540)={&(0x7f0000000100), 0x80, &(0x7f0000000980)=[{&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/216, 0xd8}], 0x6}, 0x100) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self/net/pfkey\x00', 0x400, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb8, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xaed}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2c28ec91}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x120}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r6}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r9}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x13}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x34}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000040) dup2(r5, r4) [ 2196.610186][T10851] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2196.884037][T10850] __nla_validate_parse: 3 callbacks suppressed [ 2196.884051][T10850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2197.011521][T10783] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2197.034481][T10842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2197.097600][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.422962][T26097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.740912][T10845] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00280003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:00 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) times(&(0x7f0000000000)) 21:46:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000e00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2197.871187][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2197.999051][T10910] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:46:01 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b"], 0xf2) [ 2198.137679][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:01 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:01 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2198.791656][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) r5 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) write$binfmt_script(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f6b766d00202f6465762f6b766d00207fcd957c28dd1618ecb9e5d6aada73e6414190202b29202c692f265d2d245d26272b2a9040c9aecb125fae0e3d6d5a7732bc1e6a1ef3a57d97e82d71d9c0c6c381a637abae41b7cc2f17468669978fd8dd71c74d7072b2f7fb1f37073d0e9c87be8a4a8e80c20b1b94ecd65710dd67ad89dceb4307000000000000006b9b90097f938e0cd9791d7aa314f8bc79cde81ea3488255fe75a3187f687f8567ffc5079fb91fa2d0a9d863ea3ce864b549cd42798f1a83d1f503900ae27f00441accc871bf1e42381ee03934ebc9e803001ab33c847f0cbca50f37ae202f6465762f6b766d00f2c732472bc68cb0b268b96b112520ebf88ca45aa78bdea29877f68241ee16ff30c185f6aef49ec50ce6553b83b18bd5f6ba676019226666de0d6882c49a5fcd532589d0d47728fa0d77e4095fcc98c3ef6e32dd3ef284b095e599a58edc88f57ba1028e9958cebfffe1c584367103eb22bb981de545c72f02db7539aa0c4baecea6f850f281e4b5a04064683d38d5ae396514224949d28d80d3c11c3c7141ac6ea8b1d73cf6c76f68a8fe34e1202f6465762f6b76751f43cda68cdd6d00202f64766d0000000000203a21252d40733f386a9357f24e60706dd9287ddbecd10c88e488c103b9432efad85a0f7d70ca1f771603029206bcf4edb054434cafa77e9e115dff8a7812bb44d3bb67db6e41ec117e5f8ea9379e0f375df637c76c3ce80ace98e799e54a1b8ab3e443d6a424fb3fd13a906d193be636deb38cfa47bd04cd4f86b87d297c1731c84910a69aea8cb14cd02fc03d71ac5501a3372e1b4de6b4e29b6f133b583007cbc8109eaea71087881c487e66ab5c0bdf84ae952f2b3c000968e952f71d290dff397a1ed2f8527f796f3c1f18babd221d5e491cbb3a34f595190e924a1f2ea97e4539403966ca61c52898951a72db03d9e36848bcbbad3308a050c3f427fd945e1921fca2429b248b406e46c06433dbb0bf786ca64bd55d6cc3b017633811ab39a3a30c55ee216ca9192d1ad8ef364a93f53a87e80b0b7a26ef9f7daaa4d0cdea48c516dc4a845a96cb1917c96bc57a7a91e67f71b1660265d0828978ece28fc3c6cbe8a99d9a8dfce0d172c617424314007e5c690a89732c0d2213474954c067b3fe706a1267df1eabe141be42bef804b0b9cf96d8f3934714d616027760491180a748c03e1125641f7c41e77d0b298fa09a3aaba5955da000ea5ca11b217d896bc79fbc3ce3acf6a65e58b973da0f826c7c205ca5be45b2d999ba927bce957c1b2b426721"], 0x22e) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r4) [ 2198.977613][T10917] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 21:46:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00f00003000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000000f00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0010000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:02 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b"], 0xf2) [ 2199.180129][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2199.252623][T10968] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 2199.692342][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2199.806896][T10920] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2199.812467][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2200.217479][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.457685][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00370003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:03 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00b30703000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:03 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b"], 0xf2) 21:46:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000001000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0018000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:04 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2201.267865][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:04 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000001100000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00c30703000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:04 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:05 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:05 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4da"], 0xf2) [ 2202.301197][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.416175][T11083] __nla_validate_parse: 4 callbacks suppressed [ 2202.416186][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2202.571746][T11049] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2202.584493][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2202.607400][T11045] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2203.337421][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.497487][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.505788][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.511327][T11086] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d003c0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:06 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0028000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000001200000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:06 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:07 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e7750bf"], 0xf2) [ 2204.377898][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.531024][T11152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:07 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2204.700402][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2204.721885][T11147] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 21:46:07 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00c40703000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:07 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:08 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4da"], 0xf2) [ 2205.424428][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000061200000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:08 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2205.682730][T11149] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2205.804717][T11224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2206.483663][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2206.539769][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d004f0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:09 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) restart_syscall() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000040)={r7, 0x3}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000000)={r7, &(0x7f0000000100)=""/127}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000080)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) 21:46:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000001300000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0000300200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:10 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e"], 0xf2) [ 2207.463301][T11268] warn_alloc: 3 callbacks suppressed [ 2207.463326][T11268] syz-executor.5: page allocation failure: order:0, mode:0x400cc4(GFP_KERNEL_ACCOUNT|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2207.510006][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.547927][T11273] __nla_validate_parse: 4 callbacks suppressed [ 2207.547987][T11273] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2207.555343][T11268] CPU: 0 PID: 11268 Comm: syz-executor.5 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2207.573313][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2207.583367][T11268] Call Trace: [ 2207.586666][T11268] dump_stack+0x18f/0x20d [ 2207.590996][T11268] warn_alloc.cold+0x87/0x17a [ 2207.595712][T11268] ? zone_watermark_ok_safe+0x260/0x260 [ 2207.601276][T11268] ? wait_for_completion+0x260/0x260 [ 2207.606658][T11268] __alloc_pages_slowpath.constprop.0+0x2197/0x2780 [ 2207.613260][T11268] ? warn_alloc+0x120/0x120 [ 2207.617761][T11268] ? fs_reclaim_release+0x94/0xf0 [ 2207.622792][T11268] ? lock_is_held_type+0xb0/0xe0 [ 2207.627735][T11268] ? find_held_lock+0x2d/0x110 [ 2207.632533][T11268] __alloc_pages_nodemask+0x5a3/0x700 [ 2207.637906][T11268] ? __zone_watermark_ok+0x3f0/0x3f0 [ 2207.643219][T11268] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2207.650585][T11268] ? lock_is_held_type+0xb0/0xe0 [ 2207.650608][T11268] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2207.650624][T11268] ? __alloc_pages_nodemask+0x5c5/0x700 [ 2207.650639][T11268] ? rwlock_bug.part.0+0x90/0x90 [ 2207.650657][T11268] alloc_pages_current+0x187/0x280 [ 2207.650678][T11268] alloc_mmu_pages+0x7f/0x170 [ 2207.650694][T11268] kvm_mmu_create+0x3cb/0x560 [ 2207.650718][T11268] kvm_arch_vcpu_create+0x16d/0xb70 [ 2207.692448][T11268] kvm_vm_ioctl+0x1547/0x23c0 [ 2207.697133][T11268] ? lock_downgrade+0x820/0x820 [ 2207.702009][T11268] ? kvm_unregister_device_ops+0x60/0x60 [ 2207.708082][T11268] ? trace_hardirqs_on+0x5f/0x220 [ 2207.713096][T11268] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2207.718235][T11268] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2207.724827][T11268] ? tomoyo_execute_permission+0x470/0x470 [ 2207.730642][T11268] ? __might_fault+0x11f/0x1d0 [ 2207.735414][T11268] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2207.741310][T11268] ? do_vfs_ioctl+0x27d/0x1090 [ 2207.746074][T11268] ? generic_block_fiemap+0x60/0x60 [ 2207.751276][T11268] ? __might_fault+0x190/0x1d0 [ 2207.756044][T11268] ? _copy_to_user+0x126/0x160 [ 2207.760871][T11268] ? __fget_files+0x294/0x400 [ 2207.765557][T11268] ? kvm_unregister_device_ops+0x60/0x60 [ 2207.771213][T11268] ksys_ioctl+0x11a/0x180 [ 2207.775571][T11268] __x64_sys_ioctl+0x6f/0xb0 [ 2207.780164][T11268] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2207.785283][T11268] do_syscall_64+0x60/0xe0 [ 2207.789709][T11268] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2207.795624][T11268] RIP: 0033:0x45cb29 [ 2207.799510][T11268] Code: Bad RIP value. [ 2207.803570][T11268] RSP: 002b:00007f7038bdbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2207.811980][T11268] RAX: ffffffffffffffda RBX: 00000000004e7f20 RCX: 000000000045cb29 [ 2207.819978][T11268] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2207.827948][T11268] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2207.835921][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2207.843886][T11268] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f7038bdc6d4 21:46:10 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d004c3e03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:11 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2208.254402][T11283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2208.277668][T11268] Mem-Info: [ 2208.280988][T11268] active_anon:170052 inactive_anon:33448 isolated_anon:0 [ 2208.280988][T11268] active_file:5832 inactive_file:10679 isolated_file:0 [ 2208.280988][T11268] unevictable:0 dirty:44 writeback:6 [ 2208.280988][T11268] slab_reclaimable:88828 slab_unreclaimable:317557 [ 2208.280988][T11268] mapped:60368 shmem:12526 pagetables:2419 bounce:0 [ 2208.280988][T11268] free:875514 free_pcp:944 free_cma:0 [ 2208.341922][T11268] Node 0 active_anon:546112kB inactive_anon:123664kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221720kB dirty:4kB writeback:8kB shmem:39816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 436224kB writeback_tmp:0kB kernel_stack:9216kB all_unreclaimable? yes [ 2208.372492][T11268] Node 1 active_anon:134096kB inactive_anon:10128kB active_file:23324kB inactive_file:42712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19752kB dirty:172kB writeback:16kB shmem:10288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:1248kB all_unreclaimable? no [ 2208.419884][T11284] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 21:46:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0000360200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:11 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2208.538328][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.544695][T11268] Node 0 DMA free:10264kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2208.684960][T11268] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2208.723942][T11268] Node 0 DMA32 free:52300kB min:50252kB low:59228kB high:68204kB reserved_highatomic:2048KB active_anon:546108kB inactive_anon:123664kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2578204kB mlocked:0kB pagetables:7456kB bounce:0kB free_pcp:2072kB local_pcp:1392kB free_cma:0kB [ 2208.802009][T11268] lowmem_reserve[]: 0 0 0 0 0 [ 2208.806895][T11268] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2208.847472][T11268] lowmem_reserve[]: 0 0 0 0 0 21:46:11 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2208.853520][T11268] Node 1 Normal free:3437972kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:134192kB inactive_anon:10132kB active_file:23324kB inactive_file:42736kB unevictable:0kB writepending:248kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:2264kB bounce:0kB free_pcp:1808kB local_pcp:1112kB free_cma:0kB [ 2208.984905][T11268] lowmem_reserve[]: 0 0 0 0 0 [ 2209.001559][T11268] Node 0 DMA: 2*4kB (ME) 36*8kB (UM) 39*16kB (UM) 36*32kB (UM) 2*64kB (ME) 1*128kB (M) 3*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 0*2048kB 1*4096kB (M) = 10264kB [ 2209.085298][T11268] Node 0 DMA32: 64*4kB (MEH) 1878*8kB (UMH) 1131*16kB (UMEH) 616*32kB (UME) 4*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53344kB [ 2209.142978][T11268] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2209.201830][T11268] Node 1 Normal: 1*4kB (E) 0*8kB 9*16kB (UME) 166*32kB (UME) 166*64kB (UE) 43*128kB (UE) 15*256kB (U) 7*512kB (UE) 4*1024kB (UM) 2*2048kB (UM) 830*4096kB (M) = 3436884kB [ 2209.240636][T11268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2209.260644][T11268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2209.281560][T11268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2209.303760][T11268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2209.353189][T11268] 23723 total pagecache pages [ 2209.371563][T11268] 0 pages in swap cache [ 2209.399871][T11268] Swap cache stats: add 0, delete 0, find 0/0 [ 2209.401706][T11317] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2209.416048][T11268] Free swap = 0kB [ 2209.441012][T11268] Total swap = 0kB [ 2209.458732][T11268] 1965979 pages RAM [ 2209.471517][T11268] 0 pages HighMem/MovableOnly [ 2209.481666][T11268] 349901 pages reserved [ 2209.485916][T11268] 0 pages cma reserved [ 2209.577555][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2209.585714][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2210.080999][T11281] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2210.635958][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2210.668891][T11346] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00500003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:13 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000003f00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r6 = dup3(r0, r5, 0x0) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000000)={0xfff, 0x47, 0x7}) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r4) 21:46:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d004d3e03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:13 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:14 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2211.387721][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2282, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) [ 2211.549381][T11399] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2211.560069][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0001360200008037153e370a", 0x25}], 0x1}, 0x0) [ 2211.668593][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:14 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000004000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) [ 2212.414726][T11475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2212.617411][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2212.707329][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.097830][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.158987][T11417] __nla_validate_parse: 2 callbacks suppressed [ 2213.158999][T11417] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2213.679340][T11470] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00670003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:16 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) r2 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xfffffff, 0x8, 0x0, r2, 0x0, &(0x7f0000000080)={0x98090c, 0x0, [], @p_u32=&(0x7f0000000000)=0x2}}) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000140)=""/129) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r4, r5, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r8) 21:46:16 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d004e3e03000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000005400000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2213.750511][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:17 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:17 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00004, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@sys_immutable='sys_immutable'}]}) [ 2214.497290][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000000)="b13a46c762eec4d9f43ab352213cc83525df11c1cf73f2b51276193cc5cee2f0d12eeeaef3", 0x25) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r5, r4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r6 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r6, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000080)=0x2) [ 2214.682252][T11539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2214.692289][T11538] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0000660200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:17 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2214.816558][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2214.855157][T11583] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:46:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r9, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0x81, 0x0, 0x3f, 0x1, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x10000, 0x6, 0x4, 0x6, 0x0, 0x7, 0x2}, 0xffffffffffffffff, 0xe, r9, 0xc) dup2(r7, r6) 21:46:18 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2215.633972][T11544] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2215.657406][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.831253][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.184298][T11548] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2216.838202][T11606] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2216.867546][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d006e0003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:19 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000006000000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdb10ce04475fc871434ce8250400000008000b00020000000600020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x4000880) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r9, r4) 21:46:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a2800000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:20 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:20 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2217.664292][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:20 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r2, 0x242a}, {r2}], 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2217.833132][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2217.897593][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0003020200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) r5 = getpid() sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r4}}}], 0x20}, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000080)='net/vlan/config\x00') bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r10 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r9, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r10, r9) 21:46:21 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup3(r3, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e"], 0xf2) [ 2218.143379][T11735] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 21:46:21 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup3(r3, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2218.698821][T26097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.736565][T11680] __nla_validate_parse: 1 callbacks suppressed [ 2218.736576][T11680] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2218.958176][T17496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2219.136191][T11675] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2219.745226][T11731] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00780003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:22 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup3(r3, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000586500000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) 21:46:22 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x10000, 0x1, 0x1a, 0x18, "045e39783441ba07f824d6fa95a607e88265fba2f6fde147bff0c92688e10c9e3677151c3a5c524b44bf46fd7dc41dd584092dd9cf43dff06dfdfdbee117b89d", "ac6740d9d38c55fa5f52898f675c8019a2bde82ce2993d2ce30a5f13f8291747", [0xffffffff, 0x400]}) r6 = dup3(0xffffffffffffffff, r0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000100)={0x721, 0x2, {0xffffffffffffffff, 0x2, 0x0, 0x2, 0x6}, 0xffffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0x6e0, 0x0, 0x3, 0x8, 0x4b564d06]}) dup2(r6, r3) 21:46:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a3200000200008037153e370a", 0x25}], 0x1}, 0x0) [ 2219.988566][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:23 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:23 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e"], 0xf2) [ 2220.533387][T11797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:46:23 executing program 5: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2220.751255][T11803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2220.774320][T11790] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a0003030200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:23 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d000000008100000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2221.020202][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:24 executing program 5: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2221.515983][T11861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2221.631994][T11802] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2221.702417][T11857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2221.737395][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.057583][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.486164][T11804] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2222.697482][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d00f00003000200008037153e370a", 0x25}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) 21:46:25 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {}], 0x2, 0x0) r4 = dup3(r3, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a3060d0ac9187f20a7725fb7eea5061bf4c348c0fb5e146ace51fad87edd0677ea5ecdb5f1d0c8e24181914726419e41b45f5262ade115c9f2dbc4a50603bddcc39885107f343b9baea9880473a5a020e740c4d78a39875d741e2685daecf6809d62f59d74300420f3366ec71674ce1850a1ab1d49ebc679d7f679f843331059fc5aeb007567067e149b979c3c2a9637682a6debf939b2b10963038b23f01a9ebb874394eafd41f3dc2c6e00165051a99ef1a2f910c6485a9e47367f73e9a5f851ee00483a87cfbe6c7b1fde9ae942c05860c55234b8c472d80b26eb72d39509d57ef6d0963db00000000000000000000000000000000d351d3879e08664a07f9b50cef0b4a86ce855196175a1f355c7208479464d06de687810934804172a9676df7c578ccea990d0519aa6e98af2d40c8c38ea0452bcc137479d430f9e417924b6895fd70e3dc2dedab0e762164e73e61978b1660c722557219f292b6cb7cc5a0f2403cdd3c653318ae19d894584be134ed56f49917eb0381d605fdf4daeaa4760e"], 0xf2) 21:46:25 executing program 5: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc6004000d000a6200000200008037153e370a", 0x25}], 0x1}, 0x0) 21:46:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="840000002800270d00ffffa88800000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000700010066770000580002001400030076657468310000000000000000000000400002003c000100"/108], 0x84}}, 0x0) [ 2223.097851][T24897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2223.112720][ T649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2223.122462][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2223.132573][ T2560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:26 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {}], 0x2, 0x0) r4 = dup3(r3, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:26 executing program 5: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{r3, 0x242a}, {r3}], 0x2, 0x0) r5 = dup3(r4, r2, 0x0) write$binfmt_misc(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) 21:46:26 executing program 3: creat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x242a}, {}], 0x2, 0x0) r4 = dup3(r3, r2, 0x0) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf2) [ 2223.761043][ C1] ================================================================== [ 2223.769526][ C1] BUG: KASAN: stack-out-of-bounds in csd_lock_record+0xcb/0xe0 [ 2223.777073][ C1] Read of size 8 at addr ffffc90017e87570 by task syz-executor.0/11940 [ 2223.785299][ C1] [ 2223.787639][ C1] CPU: 1 PID: 11940 Comm: syz-executor.0 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 2223.797518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2223.807581][ C1] Call Trace: [ 2223.810871][ C1] [ 2223.813762][ C1] dump_stack+0x18f/0x20d [ 2223.818142][ C1] ? csd_lock_record+0xcb/0xe0 [ 2223.822911][ C1] ? csd_lock_record+0xcb/0xe0 [ 2223.827680][ C1] print_address_description.constprop.0.cold+0x5/0x436 [ 2223.834623][ C1] ? lapic_next_event+0x4d/0x80 [ 2223.839481][ C1] ? lockdep_hardirqs_off+0x66/0xa0 [ 2223.844685][ C1] ? vprintk_func+0x97/0x1a6 [ 2223.849282][ C1] ? csd_lock_record+0xcb/0xe0 [ 2223.854050][ C1] kasan_report.cold+0x1f/0x37 [ 2223.858819][ C1] ? csd_lock_record+0xcb/0xe0 [ 2223.863588][ C1] csd_lock_record+0xcb/0xe0 [ 2223.868189][ C1] flush_smp_call_function_queue+0x285/0x730 [ 2223.874180][ C1] ? param_set_next_fqs_jiffies+0x130/0x130 [ 2223.880085][ C1] __sysvec_call_function_single+0x98/0x490 [ 2223.885987][ C1] asm_call_on_stack+0xf/0x20 [ 2223.889606][T11925] __nla_validate_parse: 2 callbacks suppressed [ 2223.889615][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2223.890654][ C1] [ 2223.890712][ C1] sysvec_call_function_single+0xe0/0x120 [ 2223.914760][ C1] asm_sysvec_call_function_single+0x12/0x20 [ 2223.920755][ C1] RIP: 0010:unwind_next_frame+0xd28/0x1f90 [ 2223.926565][ C1] Code: c1 ea 03 48 c1 ee 03 0f b6 14 02 0f b6 04 06 4c 89 ce 83 e6 07 40 38 f2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 bd 0b 00 00 <83> e1 07 38 c8 0f 9e c2 84 c0 0f 95 c0 84 c2 0f 85 a8 0b 00 00 41 [ 2223.946175][ C1] RSP: 0018:ffffc90017e67270 EFLAGS: 00000246 [ 2223.952242][ C1] RAX: 0000000000000000 RBX: 1ffff92002fcce56 RCX: ffffffff8b79327f [ 2223.960216][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc90017e673a0 [ 2223.968191][ C1] RBP: 0000000000000001 R08: ffffffff8b79327a R09: ffffffff8b79327e [ 2223.976168][ C1] R10: 000000000007201e R11: 0000000000000001 R12: ffffc90017e67b50 [ 2223.985123][ C1] R13: ffffc90017e6737d R14: ffffc90017e67398 R15: ffffc90017e67348 [ 2223.993134][ C1] ? sock_sendmsg+0xcf/0x120 [ 2223.997734][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2224.003808][ C1] ? deref_stack_reg+0x150/0x150 [ 2224.008786][ C1] ? __unwind_start+0x4dd/0x7c0 [ 2224.013642][ C1] ? profile_setup.cold+0xc1/0xc1 [ 2224.018696][ C1] arch_stack_walk+0x81/0xf0 [ 2224.023338][ C1] ? ____sys_sendmsg+0x6e8/0x810 [ 2224.028313][ C1] stack_trace_save+0x8c/0xc0 [ 2224.032996][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 2224.038811][ C1] ? mark_lock+0xbc/0x1710 [ 2224.043235][ C1] ? __lock_acquire+0x16e3/0x56e0 [ 2224.048263][ C1] save_stack+0x1b/0x40 [ 2224.052419][ C1] ? save_stack+0x1b/0x40 [ 2224.056754][ C1] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2224.062567][ C1] ? kmem_cache_alloc_node_trace+0x153/0x590 [ 2224.068552][ C1] ? __kmalloc_node_track_caller+0x38/0x60 [ 2224.074362][ C1] ? __alloc_skb+0xae/0x550 [ 2224.078976][ C1] ? netlink_ack+0x331/0xa10 [ 2224.083571][ C1] ? netlink_rcv_skb+0x344/0x430 [ 2224.088507][ C1] ? netlink_unicast+0x533/0x7d0 [ 2224.093445][ C1] ? netlink_sendmsg+0x856/0xd90 [ 2224.098403][ C1] ? sock_sendmsg+0xcf/0x120 [ 2224.102995][ C1] ? netlink_ack+0x331/0xa10 [ 2224.107602][ C1] ? netlink_rcv_skb+0x344/0x430 [ 2224.112550][ C1] ? netlink_unicast+0x533/0x7d0 [ 2224.117497][ C1] ? netlink_sendmsg+0x856/0xd90 [ 2224.122455][ C1] ? sock_sendmsg+0xcf/0x120 [ 2224.127051][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2224.133039][ C1] ? do_syscall_64+0x60/0xe0 [ 2224.137662][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2224.143734][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2224.149730][ C1] ? lock_acquire+0x1f1/0xad0 [ 2224.154410][ C1] ? fs_reclaim_acquire+0xa1/0x110 [ 2224.159543][ C1] ? find_held_lock+0x2d/0x110 [ 2224.164313][ C1] ? fs_reclaim_release+0x94/0xf0 [ 2224.169349][ C1] ? lock_downgrade+0x820/0x820 [ 2224.174204][ C1] ? kasan_unpoison_shadow+0x33/0x40 [ 2224.179499][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2224.185155][ C1] kmem_cache_alloc_node_trace+0x153/0x590 [ 2224.190978][ C1] __kmalloc_node_track_caller+0x38/0x60 [ 2224.196617][ C1] __alloc_skb+0xae/0x550 [ 2224.200959][ C1] netlink_ack+0x331/0xa10 [ 2224.205390][ C1] ? netlink_sendmsg+0xd90/0xd90 [ 2224.210335][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2224.215631][ C1] netlink_rcv_skb+0x344/0x430 [ 2224.220432][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 2224.225925][ C1] ? netlink_ack+0xa10/0xa10 [ 2224.230542][ C1] netlink_unicast+0x533/0x7d0 [ 2224.235313][ C1] ? netlink_attachskb+0x810/0x810 [ 2224.240447][ C1] ? _copy_from_iter_full+0x247/0x890 [ 2224.245823][ C1] ? __phys_addr+0x9a/0x110 [ 2224.250328][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 2224.255355][ C1] ? __check_object_size+0x171/0x3e4 [ 2224.260646][ C1] netlink_sendmsg+0x856/0xd90 [ 2224.265434][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 2224.270390][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 2224.275337][ C1] sock_sendmsg+0xcf/0x120 [ 2224.279799][ C1] ____sys_sendmsg+0x6e8/0x810 [ 2224.284575][ C1] ? kernel_sendmsg+0x50/0x50 [ 2224.289256][ C1] ? do_recvmmsg+0x6d0/0x6d0 [ 2224.293849][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2224.299851][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2224.305833][ C1] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2224.310951][ C1] ___sys_sendmsg+0xf3/0x170 [ 2224.315550][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 2224.320841][ C1] ? __fget_files+0x272/0x400 [ 2224.325533][ C1] ? lock_downgrade+0x820/0x820 [ 2224.330390][ C1] ? find_held_lock+0x2d/0x110 [ 2224.335159][ C1] ? __might_fault+0x11f/0x1d0 [ 2224.339935][ C1] ? __fget_files+0x294/0x400 [ 2224.344622][ C1] ? __fget_light+0xea/0x280 [ 2224.349220][ C1] __sys_sendmsg+0xe5/0x1b0 [ 2224.353721][ C1] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2224.358751][ C1] ? kcov_ioctl+0x192/0x640 [ 2224.363261][ C1] ? do_syscall_64+0x1c/0xe0 [ 2224.367875][ C1] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2224.374127][ C1] do_syscall_64+0x60/0xe0 [ 2224.378546][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2224.384439][ C1] RIP: 0033:0x45cb29 [ 2224.388347][ C1] Code: Bad RIP value. [ 2224.392581][ C1] RSP: 002b:00007fdd8b98cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2224.400986][ C1] RAX: ffffffffffffffda RBX: 00000000005027a0 RCX: 000000000045cb29 [ 2224.408971][ C1] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 2224.416962][ C1] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 2224.424929][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2224.432902][ C1] R13: 0000000000000a44 R14: 00000000004cd2b2 R15: 00007fdd8b98d6d4 [ 2224.440885][ C1] [ 2224.443202][ C1] [ 2224.445526][ C1] Memory state around the buggy address: [ 2224.451173][ C1] ffffc90017e87400: 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 [ 2224.459233][ C1] ffffc90017e87480: 00 00 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 00 00 [ 2224.467293][ C1] >ffffc90017e87500: 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 [ 2224.475346][ C1] ^ [ 2224.483057][ C1] ffffc90017e87580: 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 [ 2224.491141][ C1] ffffc90017e87600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2224.499212][ C1] ================================================================== [ 2224.507263][ C1] Disabling lock debugging due to kernel taint [ 2224.513408][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 2224.519991][ C1] CPU: 1 PID: 11940 Comm: syz-executor.0 Tainted: G B 5.8.0-rc3-next-20200703-syzkaller #0 [ 2224.531254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2224.541296][ C1] Call Trace: [ 2224.544571][ C1] [ 2224.547426][ C1] dump_stack+0x18f/0x20d [ 2224.551764][ C1] ? csd_lock_record+0x30/0xe0 [ 2224.556535][ C1] panic+0x2e3/0x75c [ 2224.560430][ C1] ? __warn_printk+0xf3/0xf3 [ 2224.565020][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0xe0 [ 2224.570829][ C1] ? csd_lock_record+0xcb/0xe0 [ 2224.575590][ C1] ? csd_lock_record+0xcb/0xe0 [ 2224.581135][ C1] end_report+0x4d/0x53 [ 2224.585324][ C1] kasan_report.cold+0xd/0x37 [ 2224.589996][ C1] ? csd_lock_record+0xcb/0xe0 [ 2224.594757][ C1] csd_lock_record+0xcb/0xe0 [ 2224.599342][ C1] flush_smp_call_function_queue+0x285/0x730 [ 2224.605318][ C1] ? param_set_next_fqs_jiffies+0x130/0x130 [ 2224.611214][ C1] __sysvec_call_function_single+0x98/0x490 [ 2224.617130][ C1] asm_call_on_stack+0xf/0x20 [ 2224.621793][ C1] [ 2224.624757][ C1] sysvec_call_function_single+0xe0/0x120 [ 2224.630482][ C1] asm_sysvec_call_function_single+0x12/0x20 [ 2224.636476][ C1] RIP: 0010:unwind_next_frame+0xd28/0x1f90 [ 2224.642275][ C1] Code: c1 ea 03 48 c1 ee 03 0f b6 14 02 0f b6 04 06 4c 89 ce 83 e6 07 40 38 f2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 bd 0b 00 00 <83> e1 07 38 c8 0f 9e c2 84 c0 0f 95 c0 84 c2 0f 85 a8 0b 00 00 41 [ 2224.661892][ C1] RSP: 0018:ffffc90017e67270 EFLAGS: 00000246 [ 2224.667954][ C1] RAX: 0000000000000000 RBX: 1ffff92002fcce56 RCX: ffffffff8b79327f [ 2224.675915][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc90017e673a0 [ 2224.683876][ C1] RBP: 0000000000000001 R08: ffffffff8b79327a R09: ffffffff8b79327e [ 2224.691869][ C1] R10: 000000000007201e R11: 0000000000000001 R12: ffffc90017e67b50 [ 2224.699833][ C1] R13: ffffc90017e6737d R14: ffffc90017e67398 R15: ffffc90017e67348 [ 2224.707820][ C1] ? sock_sendmsg+0xcf/0x120 [ 2224.712404][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2224.718480][ C1] ? deref_stack_reg+0x150/0x150 [ 2224.723422][ C1] ? __unwind_start+0x4dd/0x7c0 [ 2224.728273][ C1] ? profile_setup.cold+0xc1/0xc1 [ 2224.733294][ C1] arch_stack_walk+0x81/0xf0 [ 2224.737916][ C1] ? ____sys_sendmsg+0x6e8/0x810 [ 2224.742871][ C1] stack_trace_save+0x8c/0xc0 [ 2224.747550][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 2224.753356][ C1] ? mark_lock+0xbc/0x1710 [ 2224.757770][ C1] ? __lock_acquire+0x16e3/0x56e0 [ 2224.762812][ C1] save_stack+0x1b/0x40 [ 2224.766962][ C1] ? save_stack+0x1b/0x40 [ 2224.771292][ C1] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2224.777100][ C1] ? kmem_cache_alloc_node_trace+0x153/0x590 [ 2224.782054][T10341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.783078][ C1] ? __kmalloc_node_track_caller+0x38/0x60 [ 2224.796916][ C1] ? __alloc_skb+0xae/0x550 [ 2224.801416][ C1] ? netlink_ack+0x331/0xa10 [ 2224.806026][ C1] ? netlink_rcv_skb+0x344/0x430 [ 2224.810960][ C1] ? netlink_unicast+0x533/0x7d0 [ 2224.815912][ C1] ? netlink_sendmsg+0x856/0xd90 [ 2224.820845][ C1] ? sock_sendmsg+0xcf/0x120 [ 2224.825435][ C1] ? netlink_ack+0x331/0xa10 [ 2224.830019][ C1] ? netlink_rcv_skb+0x344/0x430 [ 2224.834951][ C1] ? netlink_unicast+0x533/0x7d0 [ 2224.839901][ C1] ? netlink_sendmsg+0x856/0xd90 [ 2224.844831][ C1] ? sock_sendmsg+0xcf/0x120 [ 2224.849422][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2224.855430][ C1] ? do_syscall_64+0x60/0xe0 [ 2224.860016][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2224.866078][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2224.872055][ C1] ? lock_acquire+0x1f1/0xad0 [ 2224.876727][ C1] ? fs_reclaim_acquire+0xa1/0x110 [ 2224.881840][ C1] ? find_held_lock+0x2d/0x110 [ 2224.886605][ C1] ? fs_reclaim_release+0x94/0xf0 [ 2224.891626][ C1] ? lock_downgrade+0x820/0x820 [ 2224.896487][ C1] ? kasan_unpoison_shadow+0x33/0x40 [ 2224.901774][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2224.907403][ C1] kmem_cache_alloc_node_trace+0x153/0x590 [ 2224.913317][ C1] __kmalloc_node_track_caller+0x38/0x60 [ 2224.918951][ C1] __alloc_skb+0xae/0x550 [ 2224.923281][ C1] netlink_ack+0x331/0xa10 [ 2224.927696][ C1] ? netlink_sendmsg+0xd90/0xd90 [ 2224.932626][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2224.937907][ C1] netlink_rcv_skb+0x344/0x430 [ 2224.942668][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 2224.948154][ C1] ? netlink_ack+0xa10/0xa10 [ 2224.952748][ C1] netlink_unicast+0x533/0x7d0 [ 2224.957510][ C1] ? netlink_attachskb+0x810/0x810 [ 2224.962615][ C1] ? _copy_from_iter_full+0x247/0x890 [ 2224.967980][ C1] ? __phys_addr+0x9a/0x110 [ 2224.972477][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 2224.977496][ C1] ? __check_object_size+0x171/0x3e4 [ 2224.982792][ C1] netlink_sendmsg+0x856/0xd90 [ 2224.987563][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 2224.992789][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 2224.997727][ C1] sock_sendmsg+0xcf/0x120 [ 2225.002148][ C1] ____sys_sendmsg+0x6e8/0x810 [ 2225.006907][ C1] ? kernel_sendmsg+0x50/0x50 [ 2225.011577][ C1] ? do_recvmmsg+0x6d0/0x6d0 [ 2225.016170][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2225.022150][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2225.028133][ C1] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2225.033238][ C1] ___sys_sendmsg+0xf3/0x170 [ 2225.037823][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 2225.043102][ C1] ? __fget_files+0x272/0x400 [ 2225.047785][ C1] ? lock_downgrade+0x820/0x820 [ 2225.052711][ C1] ? find_held_lock+0x2d/0x110 [ 2225.057466][ C1] ? __might_fault+0x11f/0x1d0 [ 2225.062226][ C1] ? __fget_files+0x294/0x400 [ 2225.066918][ C1] ? __fget_light+0xea/0x280 [ 2225.071505][ C1] __sys_sendmsg+0xe5/0x1b0 [ 2225.076020][ C1] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2225.081038][ C1] ? kcov_ioctl+0x192/0x640 [ 2225.085537][ C1] ? do_syscall_64+0x1c/0xe0 [ 2225.090147][ C1] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2225.096144][ C1] do_syscall_64+0x60/0xe0 [ 2225.100556][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2225.106440][ C1] RIP: 0033:0x45cb29 [ 2225.110325][ C1] Code: Bad RIP value. [ 2225.114382][ C1] RSP: 002b:00007fdd8b98cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2225.122783][ C1] RAX: ffffffffffffffda RBX: 00000000005027a0 RCX: 000000000045cb29 [ 2225.130744][ C1] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 2225.138706][ C1] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.146690][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2225.154650][ C1] R13: 0000000000000a44 R14: 00000000004cd2b2 R15: 00007fdd8b98d6d4 [ 2225.163661][ C1] Kernel Offset: disabled [ 2225.168018][ C1] Rebooting in 86400 seconds..