e, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:55:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:51 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0xc5d8, 0x214000) sendfile(r4, r3, &(0x7f0000000140)=0x5, 0x101) (async, rerun: 64) r5 = openat$cgroup_pressure(r2, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) (rerun: 64) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000001c0)={0x3f, 0x7, 0x4, 0x0, 0x3, [{0xfffffffffffffff9, 0x40, 0x800, '\x00', 0x4}, {0x1, 0xa000000, 0x400, '\x00', 0x888}, {0x7fffffffffffffff, 0xfffffffffffff000, 0x71d7fb29, '\x00', 0x8}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='!.']) [ 1222.450855][ T8167] 9pnet_fd: Insufficient options for proto=fd [ 1222.483723][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:51 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x7bd4, 0x20, 0x0, 0x91, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x1}, 0x3) (async) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:55:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xa7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1222.498115][ T8179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8179 comm=syz-executor.2 [ 1222.520208][ T8181] 9pnet_fd: Insufficient options for proto=fd [ 1222.576216][ T8192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8192 comm=syz-executor.0 [ 1222.590176][ T8189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8189 comm=syz-executor.2 [ 1222.604536][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1222.621231][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:55:51 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1000}}, 0x100) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:55:51 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74080000003d66fe59cd49c51783c1d94e642c7203006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 00:55:51 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b37, 0x205280, 0x0, 0x0, 0xffffff0e) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r5 = socket(0x40000000015, 0x5, 0x0) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r6}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r5, r3], 0x3, 0x0, 0x1}, 0x1) 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xa8, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xa9, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:51 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74080000003d66fe59cd49c51783c1d94e642c7203006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 00:55:51 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) (async, rerun: 64) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1000}}, 0x100) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1222.685503][ T8198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8198 comm=syz-executor.2 [ 1222.701889][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1222.714587][ T8205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8205 comm=syz-executor.0 00:55:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xaa, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:51 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b37, 0x205280, 0x0, 0x0, 0xffffff0e) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r5 = socket(0x40000000015, 0x5, 0x0) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r6}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r5, r3], 0x3, 0x0, 0x1}, 0x1) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b37, 0x205280, 0x0, 0x0, 0xffffff0e) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) socket(0x40000000015, 0x5, 0x0) (async) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r6}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r5, r3], 0x3, 0x0, 0x1}, 0x1) (async) 00:55:51 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74080000003d66fe59cd49c51783c1d94e642c7203006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) (async) dup3(r0, r1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74080000003d66fe59cd49c51783c1d94e642c7203006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xab, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1222.734638][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1222.770223][ T8221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8221 comm=syz-executor.2 00:55:51 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x292c02, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) accept$nfc_llcp(r0, 0x0, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r5}) lseek(r6, 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 00:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:51 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1222.792799][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1222.823483][ T8241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8241 comm=syz-executor.0 00:55:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xac, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:51 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b37, 0x205280, 0x0, 0x0, 0xffffff0e) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r5 = socket(0x40000000015, 0x5, 0x0) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r6}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r5, r3], 0x3, 0x0, 0x1}, 0x1) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b37, 0x205280, 0x0, 0x0, 0xffffff0e) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) socket(0x40000000015, 0x5, 0x0) (async) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r6}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r5, r3], 0x3, 0x0, 0x1}, 0x1) (async) [ 1222.839198][ T8241] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1222.865296][ T8264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8264 comm=syz-executor.2 [ 1222.879216][ T8240] 9pnet_fd: Insufficient options for proto=fd 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xad, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:51 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x292c02, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) accept$nfc_llcp(r0, 0x0, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r5}) lseek(r6, 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x292c02, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) (async) dup3(r0, r1, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) accept$nfc_llcp(r0, 0x0, &(0x7f0000000280)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r5}) (async) lseek(r6, 0x2, 0x3) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) (async) 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xae, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1222.892113][ T8241] sch_tbf: burst 127 is lower than device veth273 mtu (1514) ! [ 1222.919509][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xaf, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:51 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) socket(0x26, 0x3, 0x7) 00:55:51 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x292c02, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) accept$nfc_llcp(r0, 0x0, &(0x7f0000000280)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r5}) lseek(r6, 0x2, 0x3) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1222.949357][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1222.968884][ T8273] 9pnet_fd: Insufficient options for proto=fd [ 1222.984651][ T8264] sch_tbf: burst 127 is lower than device veth275 mtu (1514) ! 00:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1222.997034][ T8277] sch_tbf: burst 127 is lower than device veth275 mtu (1514) ! 00:55:52 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:55:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb1, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:52 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) close(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x10000) r6 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r6, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) close(r6) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) io_submit(0x0, 0x3, &(0x7f0000001340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x1e6, r1, &(0x7f0000000140)="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", 0x1000, 0x7, 0x0, 0x1, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0x101, 0xffffffffffffffff, &(0x7f0000001140)="fb44992e16e5e3913311441e532041130d0ba466ecf59eeb4114bce51799d22332f7f152eaae972a1d21826a9a38d4210072e4e1114b7e6f43a7584353b177fcbf672c93511b410c67c6161d9b3e402045f369339f1c7441739734ad78f380433c165cc9b9950f3f98466396e00073186eb8cee1536c4baeb2e8618ec73a910e69a2197ffe495ed3", 0x88, 0xce3, 0x0, 0x3, r4}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3, 0x7ff, r6, &(0x7f0000001240)="4f9f8077df3cbf692f7a98d3d16f69c67a936cea518a1fae7886bda3a490e43aef8adb87df14ffc998088cd0ad060821b374ed8b5af07c49d58fcd3904e59e1db190700a5a56f9dd38392c271b49e1bb72a7b18bbefcca0a7e594b658aeb033e521a", 0x62, 0x7fff, 0x0, 0x2, r7}]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 00:55:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:52 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket(0x26, 0x3, 0x7) (rerun: 32) 00:55:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:53 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) socket(0x26, 0x3, 0x7) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) socket(0x26, 0x3, 0x7) (async) [ 1224.088317][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb3, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="d0e1cda8f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1cc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#O!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^#%#\x0e,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[:\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6feb}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!a\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x1) set_mempolicy(0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400009f4b7e00", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000030000180060001000a000000060005004e21000014000400fe8800000000000000000000000000010800060007000000"], 0x44}}, 0x0) r5 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r5, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x72a6, &(0x7f0000000380)={0x0, 0xadcc, 0x2, 0x2, 0x386, 0x0, r5}, &(0x7f00005ef000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xff) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4000, @fd=r0, 0x6, 0x0, 0x0, 0x1a, 0x1, {0x3, r11}}, 0xffffffff) 00:55:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1224.133685][ T8320] sch_tbf: burst 127 is lower than device veth277 mtu (1514) ! [ 1224.151814][ T8325] sch_tbf: burst 127 is lower than device veth277 mtu (1514) ! [ 1224.235172][ T8347] sch_tbf: burst 127 is lower than device veth279 mtu (1514) ! 00:55:54 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:55:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb4, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="d0e1cda8f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1cc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#O!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^#%#\x0e,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[:\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6feb}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!a\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x1) set_mempolicy(0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400009f4b7e00", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000030000180060001000a000000060005004e21000014000400fe8800000000000000000000000000010800060007000000"], 0x44}}, 0x0) r5 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r5, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x72a6, &(0x7f0000000380)={0x0, 0xadcc, 0x2, 0x2, 0x386, 0x0, r5}, &(0x7f00005ef000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xff) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4000, @fd=r0, 0x6, 0x0, 0x0, 0x1a, 0x1, {0x3, r11}}, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="d0e1cda8f1"], 0x20000600}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1cc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#O!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^#%#\x0e,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[:\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6feb}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!a\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) set_mempolicy(0x1, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400009f4b7e00", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000030000180060001000a000000060005004e21000014000400fe8800000000000000000000000000010800060007000000"], 0x44}}, 0x0) (async) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r5, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x72a6, &(0x7f0000000380)={0x0, 0xadcc, 0x2, 0x2, 0x386, 0x0, r5}, &(0x7f00005ef000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xff) (async) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4000, @fd=r0, 0x6, 0x0, 0x0, 0x1a, 0x1, {0x3, r11}}, 0xffffffff) (async) 00:55:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) (rerun: 32) r2 = dup3(r0, r1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async, rerun: 32) close(0xffffffffffffffff) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x10000) r6 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r6, 0x0) (async) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) close(r6) (async, rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) io_submit(0x0, 0x3, &(0x7f0000001340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x1e6, r1, &(0x7f0000000140)="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", 0x1000, 0x7, 0x0, 0x1, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0x101, 0xffffffffffffffff, &(0x7f0000001140)="fb44992e16e5e3913311441e532041130d0ba466ecf59eeb4114bce51799d22332f7f152eaae972a1d21826a9a38d4210072e4e1114b7e6f43a7584353b177fcbf672c93511b410c67c6161d9b3e402045f369339f1c7441739734ad78f380433c165cc9b9950f3f98466396e00073186eb8cee1536c4baeb2e8618ec73a910e69a2197ffe495ed3", 0x88, 0xce3, 0x0, 0x3, r4}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3, 0x7ff, r6, &(0x7f0000001240)="4f9f8077df3cbf692f7a98d3d16f69c67a936cea518a1fae7886bda3a490e43aef8adb87df14ffc998088cd0ad060821b374ed8b5af07c49d58fcd3904e59e1db190700a5a56f9dd38392c271b49e1bb72a7b18bbefcca0a7e594b658aeb033e521a", 0x62, 0x7fff, 0x0, 0x2, r7}]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 00:55:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb5, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) r2 = dup3(r0, r1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) close(0xffffffffffffffff) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x10000) (async) r6 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r6, 0x0) (async) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) (async) sendto$inet6(r6, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) close(r6) (async) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) io_submit(0x0, 0x3, &(0x7f0000001340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x1e6, r1, &(0x7f0000000140)="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", 0x1000, 0x7, 0x0, 0x1, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0x101, 0xffffffffffffffff, &(0x7f0000001140)="fb44992e16e5e3913311441e532041130d0ba466ecf59eeb4114bce51799d22332f7f152eaae972a1d21826a9a38d4210072e4e1114b7e6f43a7584353b177fcbf672c93511b410c67c6161d9b3e402045f369339f1c7441739734ad78f380433c165cc9b9950f3f98466396e00073186eb8cee1536c4baeb2e8618ec73a910e69a2197ffe495ed3", 0x88, 0xce3, 0x0, 0x3, r4}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3, 0x7ff, r6, &(0x7f0000001240)="4f9f8077df3cbf692f7a98d3d16f69c67a936cea518a1fae7886bda3a490e43aef8adb87df14ffc998088cd0ad060821b374ed8b5af07c49d58fcd3904e59e1db190700a5a56f9dd38392c271b49e1bb72a7b18bbefcca0a7e594b658aeb033e521a", 0x62, 0x7fff, 0x0, 0x2, r7}]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 00:55:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb6, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616eb1f14d812c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 00:55:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:54 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x145f5, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:55:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb8, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616eb1f14d812c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 00:55:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async, rerun: 32) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="d0e1cda8f1"], 0x20000600}}, 0x0) (rerun: 32) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1cc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#O!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^#%#\x0e,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[:\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6feb}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!a\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) set_mempolicy(0x1, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400009f4b7e00", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000030000180060001000a000000060005004e21000014000400fe8800000000000000000000000000010800060007000000"], 0x44}}, 0x0) (async) r5 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r5, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x72a6, &(0x7f0000000380)={0x0, 0xadcc, 0x2, 0x2, 0x386, 0x0, r5}, &(0x7f00005ef000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xff) (async) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4000, @fd=r0, 0x6, 0x0, 0x0, 0x1a, 0x1, {0x3, r11}}, 0xffffffff) 00:55:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xb9, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) dup3(r0, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616eb1f14d812c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) (async) dup3(r0, r1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616eb1f14d812c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) 00:55:54 executing program 5: r0 = syz_io_uring_setup(0x86, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r7 = syz_io_uring_setup(0x4ac4, &(0x7f0000000380)={0x0, 0xf66f, 0x2, 0x1, 0x87, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffff00, 0x0, 0x1, {0x0, 0x0, r3}}, 0x8000) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r12, r11, 0x0, 0x10000) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r11, 0x0, r3, 0x2, 0x0, 0x1, {0x0, r10}}, 0x80000000) io_uring_enter(r7, 0x5b90, 0x6051, 0x2, &(0x7f0000000440)={[0x3]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x9) 00:55:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xba, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ee51ca000000001200001a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="d0e1cda8f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1cc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#O!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^#%#\x0e,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[:\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6feb}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!a\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x1) set_mempolicy(0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400009f4b7e00", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000030000180060001000a000000060005004e21000014000400fe8800000000000000000000000000010800060007000000"], 0x44}}, 0x0) r5 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r5, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x72a6, &(0x7f0000000380)={0x0, 0xadcc, 0x2, 0x2, 0x386, 0x0, r5}, &(0x7f00005ef000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xff) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4000, @fd=r0, 0x6, 0x0, 0x0, 0x1a, 0x1, {0x3, r11}}, 0xffffffff) 00:55:54 executing program 5: r0 = syz_io_uring_setup(0x86, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r7 = syz_io_uring_setup(0x4ac4, &(0x7f0000000380)={0x0, 0xf66f, 0x2, 0x1, 0x87, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffff00, 0x0, 0x1, {0x0, 0x0, r3}}, 0x8000) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r12, r11, 0x0, 0x10000) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r11, 0x0, r3, 0x2, 0x0, 0x1, {0x0, r10}}, 0x80000000) io_uring_enter(r7, 0x5b90, 0x6051, 0x2, &(0x7f0000000440)={[0x3]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x9) syz_io_uring_setup(0x86, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_io_uring_setup(0x4ac4, &(0x7f0000000380)={0x0, 0xf66f, 0x2, 0x1, 0x87, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r8, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffff00, 0x0, 0x1, {0x0, 0x0, r3}}, 0x8000) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendfile(r12, r11, 0x0, 0x10000) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r11, 0x0, r3, 0x2, 0x0, 0x1, {0x0, r10}}, 0x80000000) (async) io_uring_enter(r7, 0x5b90, 0x6051, 0x2, &(0x7f0000000440)={[0x3]}, 0x8) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x9) (async) 00:55:55 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x145f5, 0x0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:55:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xbb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:55 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:55:55 executing program 5: r0 = syz_io_uring_setup(0x86, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) r4 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r7 = syz_io_uring_setup(0x4ac4, &(0x7f0000000380)={0x0, 0xf66f, 0x2, 0x1, 0x87, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffff00, 0x0, 0x1, {0x0, 0x0, r3}}, 0x8000) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendfile(r12, r11, 0x0, 0x10000) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r11, 0x0, r3, 0x2, 0x0, 0x1, {0x0, r10}}, 0x80000000) io_uring_enter(r7, 0x5b90, 0x6051, 0x2, &(0x7f0000000440)={[0x3]}, 0x8) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x9) 00:55:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:55:55 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x145f5, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x145f5, 0x0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:55:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xbc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:55 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @local}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1226.763115][ T8470] net_ratelimit: 59 callbacks suppressed [ 1226.763129][ T8470] dccp_time_wait: time wait bucket table overflow [ 1226.781292][ T8470] dccp_time_wait: time wait bucket table overflow [ 1226.787984][ T8470] dccp_time_wait: time wait bucket table overflow [ 1226.796982][ T8470] dccp_time_wait: time wait bucket table overflow 00:55:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xbd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xbe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1226.815942][ T8470] dccp_time_wait: time wait bucket table overflow [ 1226.828025][ T8470] dccp_time_wait: time wait bucket table overflow [ 1226.836149][ T8492] dccp_time_wait: time wait bucket table overflow [ 1226.855891][ T8470] dccp_time_wait: time wait bucket table overflow 00:55:55 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @local}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:55:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1226.863392][ T8470] dccp_time_wait: time wait bucket table overflow [ 1226.874858][ T8470] dccp_time_wait: time wait bucket table overflow 00:55:56 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x1000000}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000000)={@remote, @broadcast, @remote}, 0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:55:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xbf, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:55:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:55:56 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @local}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @local}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) [ 1231.771107][ T8487] net_ratelimit: 1955 callbacks suppressed [ 1231.771117][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.801858][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.826243][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.849523][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.874111][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.898583][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.922173][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.945531][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.969035][ T8487] dccp_time_wait: time wait bucket table overflow [ 1231.993899][ T8487] dccp_time_wait: time wait bucket table overflow 00:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:01 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x800c6613, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) fcntl$dupfd(r3, 0x406, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x6c, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x40, 0x2, [@TCA_BPF_ACT={0x3c, 0x1, [@m_ct={0x38, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xe, 0x6, "008d3d8896d8aef83a18"}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) 00:56:01 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000148000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x8, 0x4, 0x0, 0x2, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_setup(0x2d6b, &(0x7f0000000380)={0x0, 0x8e94, 0x0, 0x0, 0x3d3}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd, 0x7ff, 0x15, 0x1, 0xe, 0x1, {0x3}}, 0x8) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2000, @fd=r9, 0x0, 0x10001}, 0x1000) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) 00:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc1, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:01 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x800c6613, 0x0) (async) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:01 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000148000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x8, 0x4, 0x0, 0x2, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_setup(0x2d6b, &(0x7f0000000380)={0x0, 0x8e94, 0x0, 0x0, 0x3d3}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd, 0x7ff, 0x15, 0x1, 0xe, 0x1, {0x3}}, 0x8) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2000, @fd=r9, 0x0, 0x10001}, 0x1000) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000148000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x8, 0x4, 0x0, 0x2, 0x0, 0x0, {0x0, r4}}, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_setup(0x2d6b, &(0x7f0000000380)={0x0, 0x8e94, 0x0, 0x0, 0x3d3}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd, 0x7ff, 0x15, 0x1, 0xe, 0x1, {0x3}}, 0x8) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2000, @fd=r9, 0x0, 0x10001}, 0x1000) (async) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) (async) [ 1232.204532][ T8554] selinux_netlink_send: 4 callbacks suppressed [ 1232.204546][ T8554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8554 comm=syz-executor.1 [ 1232.209524][ T8558] __nla_validate_parse: 13 callbacks suppressed [ 1232.209550][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:01 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x800c6613, 0x0) (async, rerun: 64) r4 = socket$inet(0x2, 0x6, 0x0) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 00:56:01 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000148000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x8, 0x4, 0x0, 0x2, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x2d6b, &(0x7f0000000380)={0x0, 0x8e94, 0x0, 0x0, 0x3d3}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd, 0x7ff, 0x15, 0x1, 0xe, 0x1, {0x3}}, 0x8) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2000, @fd=r9, 0x0, 0x10001}, 0x1000) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async, rerun: 32) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) (rerun: 32) [ 1232.254489][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1232.277265][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1232.306157][ T8587] sch_tbf: burst 127 is lower than device veth11 mtu (1514) ! 00:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc3, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:01 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xc9, 0x600, 0x12345, {0x0, r4}}, 0x0) [ 1232.353452][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1232.389903][ T8554] sch_tbf: burst 11 is lower than device veth11 mtu (1514) ! 00:56:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x6c, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x40, 0x2, [@TCA_BPF_ACT={0x3c, 0x1, [@m_ct={0x38, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xe, 0x6, "008d3d8896d8aef83a18"}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) 00:56:01 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x11b0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000040)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r5, 0xa, 0x11) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r7, r6, 0x0, 0x10000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r9, r8, 0x0, 0x10000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r11, r10, 0x0, 0x10000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0xffff76ce}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, @generic={0x3, 0x6, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0x8, 0x5, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @exit], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', r4, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0x2, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, r5, r6, r8, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0x1]}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc4, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:01 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x11b0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000040)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async, rerun: 32) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) (rerun: 32) fcntl$setsig(r5, 0xa, 0x11) (async) fcntl$setlease(r5, 0x400, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r7, r6, 0x0, 0x10000) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r9, r8, 0x0, 0x10000) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r11, r10, 0x0, 0x10000) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0xffff76ce}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, @generic={0x3, 0x6, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0x8, 0x5, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @exit], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', r4, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0x2, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, r5, r6, r8, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0x1]}, 0x80) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc5, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1232.401274][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1232.435319][ T8619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8619 comm=syz-executor.1 00:56:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:01 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x11b0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000040)=0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r5, 0xa, 0x11) fcntl$setlease(r5, 0x400, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r7, r6, 0x0, 0x10000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r9, r8, 0x0, 0x10000) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r11, r10, 0x0, 0x10000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0xffff76ce}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, @generic={0x3, 0x6, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0x8, 0x5, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @exit], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', r4, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0x2, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, r5, r6, r8, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0x1]}, 0x80) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1232.465634][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:01 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r4, 0xa, 0x11) fcntl$setlease(r4, 0x400, 0x0) io_uring_enter(r4, 0x6861, 0x79f8, 0x2, &(0x7f0000000540)={[0xdf]}, 0x8) r5 = socket$inet(0x2, 0x6, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) sendmsg$sock(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="c0f49a233fb1550e1fd49869d46352dd52ad0cb7c25c0ba1b3b7558ec7247df302159f6ff312af38df00c9ee6672f34a7745deea3a6b213e97d3bc85aa02da6d4805d4f42eb9d8b90fbb8b9dab2b50fb761ea5c0c86c786d412cce625cf242d20b9786ee013d4a5ac0a5ccbcaf83faedd8dabe3c3b1f877ad6c369", 0x7b}, {&(0x7f0000000140)="034bb94e82e121a85cdfcdab8b6f195d06705f63d5a4b5e700d98290f32b10764239310accd1a23ba3c9e21ff82451f17b1aca3c155ee1e8eff868ac436910607eeff25fa7b1b8accf3182dc8145e084bba902dc217d0c8e7ba6f5b43939d218f813253c173587a1c211ad191562dd97245e7a5b643c889dc13735de757c459e0706e024f3aa6db3295fe516ae", 0x8d}, {&(0x7f0000000380)="fa3d7626aee7a5e6e5947b32be09a960b075b30f66256d627745b34d0f8ca900b7c28e0db1ec9a566b2855a5af0af1cb28f61f00a36ce71efcf2d0ba15898f8873657b1b31d1f6e476776c4001afa3d24ebace143c49af121a71321920c6e6030257d5a1ab3c5af975c60107bab86824b3ab7a6180bc3d36bf88c1472290b7b35c0e58353889840be335620a07935a97b82178279ee35a4b4337cd6543b81dfa579be09a1a57a1a3eeec9ae9", 0xac}], 0x3, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x60}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x90}, 0x8001) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000580)={r0}) 00:56:01 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r4, 0xa, 0x11) fcntl$setlease(r4, 0x400, 0x0) io_uring_enter(r4, 0x6861, 0x79f8, 0x2, &(0x7f0000000540)={[0xdf]}, 0x8) r5 = socket$inet(0x2, 0x6, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) sendmsg$sock(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="c0f49a233fb1550e1fd49869d46352dd52ad0cb7c25c0ba1b3b7558ec7247df302159f6ff312af38df00c9ee6672f34a7745deea3a6b213e97d3bc85aa02da6d4805d4f42eb9d8b90fbb8b9dab2b50fb761ea5c0c86c786d412cce625cf242d20b9786ee013d4a5ac0a5ccbcaf83faedd8dabe3c3b1f877ad6c369", 0x7b}, {&(0x7f0000000140)="034bb94e82e121a85cdfcdab8b6f195d06705f63d5a4b5e700d98290f32b10764239310accd1a23ba3c9e21ff82451f17b1aca3c155ee1e8eff868ac436910607eeff25fa7b1b8accf3182dc8145e084bba902dc217d0c8e7ba6f5b43939d218f813253c173587a1c211ad191562dd97245e7a5b643c889dc13735de757c459e0706e024f3aa6db3295fe516ae", 0x8d}, {&(0x7f0000000380)="fa3d7626aee7a5e6e5947b32be09a960b075b30f66256d627745b34d0f8ca900b7c28e0db1ec9a566b2855a5af0af1cb28f61f00a36ce71efcf2d0ba15898f8873657b1b31d1f6e476776c4001afa3d24ebace143c49af121a71321920c6e6030257d5a1ab3c5af975c60107bab86824b3ab7a6180bc3d36bf88c1472290b7b35c0e58353889840be335620a07935a97b82178279ee35a4b4337cd6543b81dfa579be09a1a57a1a3eeec9ae9", 0xac}], 0x3, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x60}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x90}, 0x8001) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000580)={r0}) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) (async) fcntl$setsig(r4, 0xa, 0x11) (async) fcntl$setlease(r4, 0x400, 0x0) (async) io_uring_enter(r4, 0x6861, 0x79f8, 0x2, &(0x7f0000000540)={[0xdf]}, 0x8) (async) socket$inet(0x2, 0x6, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) (async) sendmsg$sock(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="c0f49a233fb1550e1fd49869d46352dd52ad0cb7c25c0ba1b3b7558ec7247df302159f6ff312af38df00c9ee6672f34a7745deea3a6b213e97d3bc85aa02da6d4805d4f42eb9d8b90fbb8b9dab2b50fb761ea5c0c86c786d412cce625cf242d20b9786ee013d4a5ac0a5ccbcaf83faedd8dabe3c3b1f877ad6c369", 0x7b}, {&(0x7f0000000140)="034bb94e82e121a85cdfcdab8b6f195d06705f63d5a4b5e700d98290f32b10764239310accd1a23ba3c9e21ff82451f17b1aca3c155ee1e8eff868ac436910607eeff25fa7b1b8accf3182dc8145e084bba902dc217d0c8e7ba6f5b43939d218f813253c173587a1c211ad191562dd97245e7a5b643c889dc13735de757c459e0706e024f3aa6db3295fe516ae", 0x8d}, {&(0x7f0000000380)="fa3d7626aee7a5e6e5947b32be09a960b075b30f66256d627745b34d0f8ca900b7c28e0db1ec9a566b2855a5af0af1cb28f61f00a36ce71efcf2d0ba15898f8873657b1b31d1f6e476776c4001afa3d24ebace143c49af121a71321920c6e6030257d5a1ab3c5af975c60107bab86824b3ab7a6180bc3d36bf88c1472290b7b35c0e58353889840be335620a07935a97b82178279ee35a4b4337cd6543b81dfa579be09a1a57a1a3eeec9ae9", 0xac}], 0x3, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x60}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x90}, 0x8001) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) (async) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000580)={r0}) (async) 00:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc6, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1232.509798][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1232.535569][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1232.568444][ T8642] sch_tbf: burst 0 is lower than device veth13 mtu (1514) ! 00:56:02 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xc9, 0x600, 0x12345, {0x0, r4}}, 0x0) 00:56:02 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) (async) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r4, 0xa, 0x11) (async) fcntl$setlease(r4, 0x400, 0x0) (async) io_uring_enter(r4, 0x6861, 0x79f8, 0x2, &(0x7f0000000540)={[0xdf]}, 0x8) r5 = socket$inet(0x2, 0x6, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) sendmsg$sock(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="c0f49a233fb1550e1fd49869d46352dd52ad0cb7c25c0ba1b3b7558ec7247df302159f6ff312af38df00c9ee6672f34a7745deea3a6b213e97d3bc85aa02da6d4805d4f42eb9d8b90fbb8b9dab2b50fb761ea5c0c86c786d412cce625cf242d20b9786ee013d4a5ac0a5ccbcaf83faedd8dabe3c3b1f877ad6c369", 0x7b}, {&(0x7f0000000140)="034bb94e82e121a85cdfcdab8b6f195d06705f63d5a4b5e700d98290f32b10764239310accd1a23ba3c9e21ff82451f17b1aca3c155ee1e8eff868ac436910607eeff25fa7b1b8accf3182dc8145e084bba902dc217d0c8e7ba6f5b43939d218f813253c173587a1c211ad191562dd97245e7a5b643c889dc13735de757c459e0706e024f3aa6db3295fe516ae", 0x8d}, {&(0x7f0000000380)="fa3d7626aee7a5e6e5947b32be09a960b075b30f66256d627745b34d0f8ca900b7c28e0db1ec9a566b2855a5af0af1cb28f61f00a36ce71efcf2d0ba15898f8873657b1b31d1f6e476776c4001afa3d24ebace143c49af121a71321920c6e6030257d5a1ab3c5af975c60107bab86824b3ab7a6180bc3d36bf88c1472290b7b35c0e58353889840be335620a07935a97b82178279ee35a4b4337cd6543b81dfa579be09a1a57a1a3eeec9ae9", 0xac}], 0x3, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x60}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x90}, 0x8001) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) (async) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000580)={r0}) 00:56:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:02 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:02 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x2, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 00:56:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc8, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:02 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x2, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (rerun: 32) [ 1233.858477][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:02 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x2, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x2, 0x0, 0x0) (async) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (async) [ 1233.901881][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1236.791561][ T8677] net_ratelimit: 975 callbacks suppressed [ 1236.791575][ T8677] dccp_time_wait: time wait bucket table overflow [ 1236.822186][ T8677] dccp_time_wait: time wait bucket table overflow [ 1236.846690][ T8677] dccp_time_wait: time wait bucket table overflow [ 1236.870740][ T8677] dccp_time_wait: time wait bucket table overflow [ 1236.894515][ T8677] dccp_time_wait: time wait bucket table overflow [ 1236.918262][ T8677] dccp_time_wait: time wait bucket table overflow [ 1236.942566][ T8677] dccp_time_wait: time wait bucket table overflow [ 1236.966817][ T8677] dccp_time_wait: time wait bucket table overflow [ 1236.991563][ T8677] dccp_time_wait: time wait bucket table overflow [ 1237.015448][ T8677] dccp_time_wait: time wait bucket table overflow 00:56:06 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xc9, 0x600, 0x12345, {0x0, r4}}, 0x0) 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xc9, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 5: r0 = syz_io_uring_setup(0x54c1, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000000)=0x9, 0x0, 0x4) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:06 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:06 executing program 5: r0 = syz_io_uring_setup(0x54c1, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000000)=0x9, 0x0, 0x4) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x54c1, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000000)=0x9, 0x0, 0x4) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xca, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xcb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 5: r0 = syz_io_uring_setup(0x54c1, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000000)=0x9, 0x0, 0x4) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1237.279717][ T8715] __nla_validate_parse: 2 callbacks suppressed [ 1237.279731][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1237.314484][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1237.363085][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1237.414208][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:06 executing program 3: r0 = syz_io_uring_setup(0x8000186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x2018a, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xcc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:06 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x11e1, &(0x7f0000000000)={0x0, 0x4f6b, 0x10, 0x1, 0x27a, 0x0, r0}, &(0x7f00005f1000/0x4000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r5, 0xa, 0x11) fcntl$setlease(r5, 0x400, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)='./file0\x00', 0x2, 0x181000, 0x54be9, {0x0, r7}}, 0x8) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x2018a, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xcd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x2018a, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) (async) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) (async) syz_io_uring_setup(0x2018a, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:06 executing program 3: r0 = syz_io_uring_setup(0x8000186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x8000186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) [ 1237.590823][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) r1 = syz_io_uring_setup(0x485, &(0x7f00000000c0)={0x0, 0x97e0, 0x2, 0x3, 0x128, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) 00:56:06 executing program 3: r0 = syz_io_uring_setup(0x8000186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x8000186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:06 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000000c0)=0xfffffffe, 0x0, 0x4) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) r1 = syz_io_uring_setup(0x485, &(0x7f00000000c0)={0x0, 0x97e0, 0x2, 0x3, 0x128, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) (async) syz_io_uring_setup(0x485, &(0x7f00000000c0)={0x0, 0x97e0, 0x2, 0x3, 0x128, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000040)) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) (async) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) (async) [ 1237.632569][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xce, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:06 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r1}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r0, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r1}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r2 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r2, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xcf, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="3000a5bcd5b1a44f518b7a277d0178afb1db2d70ea2cd3203c698c5f400617c7370ecb1c6e0be22ead998c63d814c1f57ccc8031db9a5d71f60d3c3cab9d3dad50cb16761f6af75f90732d96614e52c6525c4c3e2d2a6f7303ff23cb181001441d40759c568dfa3aa24d867b596da239df92581bda9a779a928217409181d8c7bf4bd8988d855c0ea90da7f28e92d074ffd2e34a731a0bcbb316014e732789dfa7e8888f522dbb85e1cd6fd4d138bb4eea2cba4dc2fa45bf998ac5bd73add8569e10a186f99c3e35826a2bda59c4527de8a08cd9eae9356e3573be5907271cc2001ab67b46870d9e1f0e3fcd3d41cc5c8b7e727a2ae4a1b6cab8c5356d1bf3392ffbc83fab83562c11689b9de444c8489c4e2f8906325ed657f7e866377d844290a7d5942f770f0cbe1a51aeaab2d76a211f82bda3140bf83efda73b8c25287295df15f124ec37bfd97eea43663b05df958f1a82f8b543ab433c66e31b5f94d4367dee28886284aca1695785bc70efb157087e225f79b0c8c861966e388b9ebbe602cbbc98ef1c6550e2d9"]) r1 = syz_io_uring_setup(0x485, &(0x7f00000000c0)={0x0, 0x97e0, 0x2, 0x3, 0x128, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) (async) syz_io_uring_setup(0x485, &(0x7f00000000c0)={0x0, 0x97e0, 0x2, 0x3, 0x128, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000040)) (async) socket$inet(0x2, 0x6, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x6, @rand_addr=0x200600, 0x0, 0x4, 'ovf\x00', 0x0, 0x7ff, 0x64}, 0x2c) (async) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) (async) 00:56:06 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000000c0)=0xfffffffe, 0x0, 0x4) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000000c0)=0xfffffffe, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1237.737253][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1237.759567][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 5: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) socket$inet(0x2, 0x6, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) io_setup(0x6c, &(0x7f0000000080)=0x0) io_cancel(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xe, r0, &(0x7f00000004c0)="c54e138afa9d61da4a17a46e94f9606b2b1e7df5472e8e3a0eba288842d2d3bec50abb3016586a1b4112bc3397816ade1b5e626de5b5952e35108433d0d220b254", 0x41, 0x9, 0x0, 0x3}, &(0x7f0000000480)) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x2, @empty}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=""/248, 0xf8}, 0x2) 00:56:06 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 32) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) (async, rerun: 32) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000000c0)=0xfffffffe, 0x0, 0x4) (async) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1237.828480][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:06 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x10400, 0xc0, 0x12}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd1, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1237.864081][ T24] audit: type=1400 audit(1659228966.769:571): avc: denied { connect } for pid=8844 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1237.884371][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:07 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r1}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r0, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r1}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r3 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r3, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 00:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:07 executing program 5: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) (async) socket$inet(0x2, 0x6, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) io_setup(0x6c, &(0x7f0000000080)=0x0) io_cancel(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xe, r0, &(0x7f00000004c0)="c54e138afa9d61da4a17a46e94f9606b2b1e7df5472e8e3a0eba288842d2d3bec50abb3016586a1b4112bc3397816ade1b5e626de5b5952e35108433d0d220b254", 0x41, 0x9, 0x0, 0x3}, &(0x7f0000000480)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x2, @empty}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=""/248, 0xf8}, 0x2) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:07 executing program 5: r0 = syz_io_uring_setup(0x189, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) socket$inet(0x2, 0x6, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) io_setup(0x6c, &(0x7f0000000080)=0x0) io_cancel(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xe, r0, &(0x7f00000004c0)="c54e138afa9d61da4a17a46e94f9606b2b1e7df5472e8e3a0eba288842d2d3bec50abb3016586a1b4112bc3397816ade1b5e626de5b5952e35108433d0d220b254", 0x41, 0x9, 0x0, 0x3}, &(0x7f0000000480)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x2, @empty}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=""/248, 0xf8}, 0x2) 00:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd3, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd4, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1238.292308][ T8934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8934 comm=syz-executor.0 00:56:07 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x10400, 0xc0, 0x12}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd5, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:07 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r1}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r0, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r1}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r3 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r3, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 00:56:07 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f0000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd6, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:07 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f0000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:07 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x10400, 0xc0, 0x12}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x10400, 0xc0, 0x12}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd8, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:07 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f0000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1238.616464][ T8993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8993 comm=syz-executor.0 00:56:07 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffea3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0], &(0x7f00000000c0)=0xa4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, &(0x7f00000001c0)=0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xd9, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:07 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x400, {0x0, r3}, 0x39c9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1f) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0x1ff, 0x4) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xda, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:07 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) (async) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffea3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0], &(0x7f00000000c0)=0xa4) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, &(0x7f00000001c0)=0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:07 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 32) r4 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (rerun: 32) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffea3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0], &(0x7f00000000c0)=0xa4) (async, rerun: 64) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, &(0x7f00000001c0)=0x8) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 00:56:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xdb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1238.871326][ T9025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9025 comm=syz-executor.0 [ 1238.875819][ T9027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9027 comm=syz-executor.2 00:56:08 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0], 0x1) 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xdc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:08 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000000c0)={0x0, 0x800000, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1239.115568][ T9056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9056 comm=syz-executor.0 [ 1239.136099][ T9057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9057 comm=syz-executor.2 00:56:08 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x400, {0x0, r3}, 0x39c9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1f) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0x1ff, 0x4) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xdd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:08 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000000c0)={0x0, 0x800000, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000000c0)={0x0, 0x800000, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xde, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:08 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000000c0)={0x0, 0x800000, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000000c0)={0x0, 0x800000, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1239.244836][ T9084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9084 comm=syz-executor.0 [ 1239.286898][ T9091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9091 comm=syz-executor.2 00:56:08 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0], 0x1) 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xdf, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:08 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f0000000580), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) r4 = accept4(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x80, 0x80800) sendto$inet(r4, &(0x7f0000000140), 0x0, 0x8090, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x1000, 0x400, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e23, 0x8000, 0xa, 0xa0, 0x0, 0x0, 0x0, r6}, {0x62f2, 0x8, 0xf1e, 0x2, 0x6, 0x5380608f, 0x9, 0x4}, {0x1000761, 0x0, 0xffffffffffffffff, 0x10001}, 0x1f, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d5, 0xff}, 0x2, @in6=@remote, 0x34ff, 0x3, 0x3, 0x5, 0x100, 0x10001, 0x1}}, 0xe8) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r7, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) close(r7) r8 = socket(0x2, 0x2, 0x0) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x2, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xd}, @local, @rand_addr=0x64010101}, 0xc) 00:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:08 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x400, {0x0, r3}, 0x39c9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1f) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0x1ff, 0x4) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1239.638454][ T9168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9168 comm=syz-executor.2 [ 1239.645838][ T9171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9171 comm=syz-executor.0 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe1, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:08 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f0000000580), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) r4 = accept4(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x80, 0x80800) sendto$inet(r4, &(0x7f0000000140), 0x0, 0x8090, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x1000, 0x400, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e23, 0x8000, 0xa, 0xa0, 0x0, 0x0, 0x0, r6}, {0x62f2, 0x8, 0xf1e, 0x2, 0x6, 0x5380608f, 0x9, 0x4}, {0x1000761, 0x0, 0xffffffffffffffff, 0x10001}, 0x1f, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d5, 0xff}, 0x2, @in6=@remote, 0x34ff, 0x3, 0x3, 0x5, 0x100, 0x10001, 0x1}}, 0xe8) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r7, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) close(r7) r8 = socket(0x2, 0x2, 0x0) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x2, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xd}, @local, @rand_addr=0x64010101}, 0xc) syz_io_uring_setup(0x186, &(0x7f0000000580), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) accept4(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x80, 0x80800) (async) sendto$inet(r4, &(0x7f0000000140), 0x0, 0x8090, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x1000, 0x400, &(0x7f0000000380)) (async) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e23, 0x8000, 0xa, 0xa0, 0x0, 0x0, 0x0, r6}, {0x62f2, 0x8, 0xf1e, 0x2, 0x6, 0x5380608f, 0x9, 0x4}, {0x1000761, 0x0, 0xffffffffffffffff, 0x10001}, 0x1f, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d5, 0xff}, 0x2, @in6=@remote, 0x34ff, 0x3, 0x3, 0x5, 0x100, 0x10001, 0x1}}, 0xe8) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x8010000400000084) (async) shutdown(r7, 0x0) (async) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) (async) sendto$inet6(r7, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) close(r7) (async) socket(0x2, 0x2, 0x0) (async) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x2, 0x0, 0x0) (async) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xd}, @local, @rand_addr=0x64010101}, 0xc) (async) 00:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:08 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0], 0x1) 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe3, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:08 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f0000000580), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) r4 = accept4(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x80, 0x80800) sendto$inet(r4, &(0x7f0000000140), 0x0, 0x8090, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x1000, 0x400, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e23, 0x8000, 0xa, 0xa0, 0x0, 0x0, 0x0, r6}, {0x62f2, 0x8, 0xf1e, 0x2, 0x6, 0x5380608f, 0x9, 0x4}, {0x1000761, 0x0, 0xffffffffffffffff, 0x10001}, 0x1f, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d5, 0xff}, 0x2, @in6=@remote, 0x34ff, 0x3, 0x3, 0x5, 0x100, 0x10001, 0x1}}, 0xe8) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r7, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) close(r7) r8 = socket(0x2, 0x2, 0x0) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x2, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xd}, @local, @rand_addr=0x64010101}, 0xc) syz_io_uring_setup(0x186, &(0x7f0000000580), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) accept4(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x80, 0x80800) (async) sendto$inet(r4, &(0x7f0000000140), 0x0, 0x8090, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x1000, 0x400, &(0x7f0000000380)) (async) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e23, 0x8000, 0xa, 0xa0, 0x0, 0x0, 0x0, r6}, {0x62f2, 0x8, 0xf1e, 0x2, 0x6, 0x5380608f, 0x9, 0x4}, {0x1000761, 0x0, 0xffffffffffffffff, 0x10001}, 0x1f, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d5, 0xff}, 0x2, @in6=@remote, 0x34ff, 0x3, 0x3, 0x5, 0x100, 0x10001, 0x1}}, 0xe8) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x8010000400000084) (async) shutdown(r7, 0x0) (async) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) (async) sendto$inet6(r7, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) close(r7) (async) socket(0x2, 0x2, 0x0) (async) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x2, 0x0, 0x0) (async) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xd}, @local, @rand_addr=0x64010101}, 0xc) (async) 00:56:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:08 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x400, {0x0, r3}, 0x39c9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1f) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0x1ff, 0x4) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe4, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:08 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xa}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) recvmsg(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r8, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r9}}, 0x2) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x1c2}, 0x0, {0x0, r9}}, 0x0) 00:56:08 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) r1 = socket$inet(0x2, 0x6, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = getgid() r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f00000011c0)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00bfe8a1c17495a3599278acc9b43d69b067bcde9e60dd928b2985f8"]) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x2208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getresgid(&(0x7f0000002340)=0x0, &(0x7f0000002380), &(0x7f00000023c0)) lsetxattr$system_posix_acl(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)='system.posix_acl_default\x00', &(0x7f0000002400)={{}, {0x1, 0x4}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x4, r11}, {0x2, 0x5, r8}, {0x2, 0x2, r6}, {0x2, 0x1, r6}, {0x2, 0x4, r6}], {0x4, 0x8}, [{0x8, 0x4, r9}, {0x8, 0x6, r12}], {0x10, 0xe}, {0x20, 0x2}}, 0x6c, 0x1) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mq_getsetattr(r13, &(0x7f0000000200), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44004}}, {{&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001940)="557add18e5d9dea9921ede303935bff2733e8b0cc304451b0d4d8a5d22fe6e0e0660e2bb11a5078426be0dac3c4a77bbacec91d3f29b4a7212eb4a21fdb6c2861ee67f14481c156130d51a1d7ddb36c61bc19a038b65f39a5e10efad9901adb8d7a11aa1dfa1e27b4856afaa6ca8804e588e85d926b1aac8f451f9929daaf840a19efe4583703114adee851bb2362f26a56b44a57d49541264933f24c539bf3c2214a95a2f9e0e26", 0xa8}, {0x0}], 0x2, &(0x7f0000002200)=ANY=[@ANYBLOB="2000000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c7ad122a91553a778d9a5a0409c469f000800000000bfe78840be5baa5a50", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRESOCT=r13, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x81}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)="a5c9e797a8aa2bcee3a6e120288e87af1cc7fd60446f510d7a7da08a68ef3138ffba7e9e497e4b1fce9a9480b387cbf13cf259578e3fa98acd162c644de9876bfc3b841501d15f951fa25eca53619fd3d071190424ad2cebc85609c7438ad04d5c7d8c2f5f4fbd444c185d0631625394ceb05a0263e212c30a9341ef13779e30530382c2dcacc8a813801bb2af7ccea2401fe26a5beb86066cea74a5", 0x9c}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="20000000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000008020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYBLOB="1400000000000000", @ANYRES16=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4000}}, {{0x0, 0x0, &(0x7f0000005900)=[{0x0}, {0x0}, {&(0x7f0000004840)="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", 0xda7}, {&(0x7f0000005840)="1efb828a19de88867645e057e8b751a125d7b0f87c3a75bf2db9118c894e8ba379b0580df2f8ecefdec06bc7e042fce0a077322ac13a79d6e123504cf59908066dc554621b930dfd985df80820fd89783c676f8ee9b2365e5a50b8ee27d55c0ce744ce95b4f7abcffb70e0c0a6353350c225", 0x72}], 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x000', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES64=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="ab44664579a9400008000000000000e0ffff11185c52094240"], 0xf8, 0x40000}}], 0x4, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000003680)={{}, {0x1, 0xc}, [{0x2, 0x4, 0xee00}, {0x2, 0x5, 0xee00}], {0x4, 0x4}, [{0x8, 0x1, r7}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, r9}, {0x8, 0x4}, {0x8, 0x3}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}]}, 0x6c, 0x2) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x2, 0xee00}, {0x2, 0x3}, {}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x7}], {}, [{0x8, 0x2, r4}, {0x8, 0x3, r7}, {0x8, 0x3}, {0x8, 0x4, 0xee01}, {0x8, 0x7, 0xee00}, {0x8, 0x6, 0xee00}], {0x10, 0x5}}, 0x8c, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, r7}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) io_uring_enter(r0, 0x2b39, 0x0, 0x3, 0x0, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe5, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) r1 = socket$inet(0x2, 0x6, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = getgid() (async) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f00000011c0)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00bfe8a1c17495a3599278acc9b43d69b067bcde9e60dd928b2985f8"]) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x2208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getresgid(&(0x7f0000002340)=0x0, &(0x7f0000002380), &(0x7f00000023c0)) lsetxattr$system_posix_acl(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)='system.posix_acl_default\x00', &(0x7f0000002400)={{}, {0x1, 0x4}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x4, r11}, {0x2, 0x5, r8}, {0x2, 0x2, r6}, {0x2, 0x1, r6}, {0x2, 0x4, r6}], {0x4, 0x8}, [{0x8, 0x4, r9}, {0x8, 0x6, r12}], {0x10, 0xe}, {0x20, 0x2}}, 0x6c, 0x1) (async) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mq_getsetattr(r13, &(0x7f0000000200), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44004}}, {{&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001940)="557add18e5d9dea9921ede303935bff2733e8b0cc304451b0d4d8a5d22fe6e0e0660e2bb11a5078426be0dac3c4a77bbacec91d3f29b4a7212eb4a21fdb6c2861ee67f14481c156130d51a1d7ddb36c61bc19a038b65f39a5e10efad9901adb8d7a11aa1dfa1e27b4856afaa6ca8804e588e85d926b1aac8f451f9929daaf840a19efe4583703114adee851bb2362f26a56b44a57d49541264933f24c539bf3c2214a95a2f9e0e26", 0xa8}, {0x0}], 0x2, &(0x7f0000002200)=ANY=[@ANYBLOB="2000000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c7ad122a91553a778d9a5a0409c469f000800000000bfe78840be5baa5a50", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRESOCT=r13, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x81}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)="a5c9e797a8aa2bcee3a6e120288e87af1cc7fd60446f510d7a7da08a68ef3138ffba7e9e497e4b1fce9a9480b387cbf13cf259578e3fa98acd162c644de9876bfc3b841501d15f951fa25eca53619fd3d071190424ad2cebc85609c7438ad04d5c7d8c2f5f4fbd444c185d0631625394ceb05a0263e212c30a9341ef13779e30530382c2dcacc8a813801bb2af7ccea2401fe26a5beb86066cea74a5", 0x9c}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="20000000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000008020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYBLOB="1400000000000000", @ANYRES16=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4000}}, {{0x0, 0x0, &(0x7f0000005900)=[{0x0}, {0x0}, {&(0x7f0000004840)="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", 0xda7}, {&(0x7f0000005840)="1efb828a19de88867645e057e8b751a125d7b0f87c3a75bf2db9118c894e8ba379b0580df2f8ecefdec06bc7e042fce0a077322ac13a79d6e123504cf59908066dc554621b930dfd985df80820fd89783c676f8ee9b2365e5a50b8ee27d55c0ce744ce95b4f7abcffb70e0c0a6353350c225", 0x72}], 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x000', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES64=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="ab44664579a9400008000000000000e0ffff11185c52094240"], 0xf8, 0x40000}}], 0x4, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000003680)={{}, {0x1, 0xc}, [{0x2, 0x4, 0xee00}, {0x2, 0x5, 0xee00}], {0x4, 0x4}, [{0x8, 0x1, r7}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, r9}, {0x8, 0x4}, {0x8, 0x3}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}]}, 0x6c, 0x2) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x2, 0xee00}, {0x2, 0x3}, {}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x7}], {}, [{0x8, 0x2, r4}, {0x8, 0x3, r7}, {0x8, 0x3}, {0x8, 0x4, 0xee01}, {0x8, 0x7, 0xee00}, {0x8, 0x6, 0xee00}], {0x10, 0x5}}, 0x8c, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, r7}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x3, 0x0, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe6, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) r1 = socket$inet(0x2, 0x6, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) (async) r4 = getgid() (async) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f00000011c0)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00bfe8a1c17495a3599278acc9b43d69b067bcde9e60dd928b2985f8"]) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x2208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) (async) getresgid(&(0x7f0000002340)=0x0, &(0x7f0000002380), &(0x7f00000023c0)) lsetxattr$system_posix_acl(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)='system.posix_acl_default\x00', &(0x7f0000002400)={{}, {0x1, 0x4}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x4, r11}, {0x2, 0x5, r8}, {0x2, 0x2, r6}, {0x2, 0x1, r6}, {0x2, 0x4, r6}], {0x4, 0x8}, [{0x8, 0x4, r9}, {0x8, 0x6, r12}], {0x10, 0xe}, {0x20, 0x2}}, 0x6c, 0x1) (async) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mq_getsetattr(r13, &(0x7f0000000200), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44004}}, {{&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001940)="557add18e5d9dea9921ede303935bff2733e8b0cc304451b0d4d8a5d22fe6e0e0660e2bb11a5078426be0dac3c4a77bbacec91d3f29b4a7212eb4a21fdb6c2861ee67f14481c156130d51a1d7ddb36c61bc19a038b65f39a5e10efad9901adb8d7a11aa1dfa1e27b4856afaa6ca8804e588e85d926b1aac8f451f9929daaf840a19efe4583703114adee851bb2362f26a56b44a57d49541264933f24c539bf3c2214a95a2f9e0e26", 0xa8}, {0x0}], 0x2, &(0x7f0000002200)=ANY=[@ANYBLOB="2000000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c7ad122a91553a778d9a5a0409c469f000800000000bfe78840be5baa5a50", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRESOCT=r13, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x81}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)="a5c9e797a8aa2bcee3a6e120288e87af1cc7fd60446f510d7a7da08a68ef3138ffba7e9e497e4b1fce9a9480b387cbf13cf259578e3fa98acd162c644de9876bfc3b841501d15f951fa25eca53619fd3d071190424ad2cebc85609c7438ad04d5c7d8c2f5f4fbd444c185d0631625394ceb05a0263e212c30a9341ef13779e30530382c2dcacc8a813801bb2af7ccea2401fe26a5beb86066cea74a5", 0x9c}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="20000000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000008020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYBLOB="1400000000000000", @ANYRES16=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4000}}, {{0x0, 0x0, &(0x7f0000005900)=[{0x0}, {0x0}, {&(0x7f0000004840)="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", 0xda7}, {&(0x7f0000005840)="1efb828a19de88867645e057e8b751a125d7b0f87c3a75bf2db9118c894e8ba379b0580df2f8ecefdec06bc7e042fce0a077322ac13a79d6e123504cf59908066dc554621b930dfd985df80820fd89783c676f8ee9b2365e5a50b8ee27d55c0ce744ce95b4f7abcffb70e0c0a6353350c225", 0x72}], 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x000', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES64=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="ab44664579a9400008000000000000e0ffff11185c52094240"], 0xf8, 0x40000}}], 0x4, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000003680)={{}, {0x1, 0xc}, [{0x2, 0x4, 0xee00}, {0x2, 0x5, 0xee00}], {0x4, 0x4}, [{0x8, 0x1, r7}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, r9}, {0x8, 0x4}, {0x8, 0x3}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}]}, 0x6c, 0x2) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x2, 0xee00}, {0x2, 0x3}, {}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x7}], {}, [{0x8, 0x2, r4}, {0x8, 0x3, r7}, {0x8, 0x3}, {0x8, 0x4, 0xee01}, {0x8, 0x7, 0xee00}, {0x8, 0x6, 0xee00}], {0x10, 0x5}}, 0x8c, 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, r7}}, './file0\x00'}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x3, 0x0, 0x0) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = socket$inet(0x2, 0x6, 0x5) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xa}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) recvmsg(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r8, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r9}}, 0x2) (async, rerun: 64) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x1c2}, 0x0, {0x0, r9}}, 0x0) (rerun: 64) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe8, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x400, {0x0, r3}, 0x39c9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1f) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="88232b23fd35d3fea08f86703b8e64c509c7e317d059cd04531811f95dd17e6c295aa7cbb78e812040457396c5b0e07bdf2bf08d303c5e0d4f9366b0afcfe1c02bd3c6d11704dcb8f6dc6d783e54421977b7c1d004b295b081e6d5cf3b537e84f902a9fc2a87d3d49dcfcee74d8129532cb400561a1b40c5ba7c32adae1d7f48cdd6d620b80a1d6da8f086ce6a13d40ba4165c9a", 0x94, 0xc800, 0xf850efad35b00831}, 0x10000) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xa}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) recvmsg(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r8, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r9}}, 0x2) (async) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x1c2}, 0x0, {0x0, r9}}, 0x0) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x3, 0x1}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @initdev}, &(0x7f0000000280)=0xc) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x275, &(0x7f0000000000)={0x0, 0xd79e, 0x8, 0x2, 0x342, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:09 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="88232b23fd35d3fea08f86703b8e64c509c7e317d059cd04531811f95dd17e6c295aa7cbb78e812040457396c5b0e07bdf2bf08d303c5e0d4f9366b0afcfe1c02bd3c6d11704dcb8f6dc6d783e54421977b7c1d004b295b081e6d5cf3b537e84f902a9fc2a87d3d49dcfcee74d8129532cb400561a1b40c5ba7c32adae1d7f48cdd6d620b80a1d6da8f086ce6a13d40ba4165c9a", 0x94, 0xc800, 0xf850efad35b00831}, 0x10000) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="88232b23fd35d3fea08f86703b8e64c509c7e317d059cd04531811f95dd17e6c295aa7cbb78e812040457396c5b0e07bdf2bf08d303c5e0d4f9366b0afcfe1c02bd3c6d11704dcb8f6dc6d783e54421977b7c1d004b295b081e6d5cf3b537e84f902a9fc2a87d3d49dcfcee74d8129532cb400561a1b40c5ba7c32adae1d7f48cdd6d620b80a1d6da8f086ce6a13d40ba4165c9a", 0x94, 0xc800, 0xf850efad35b00831}, 0x10000) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xe9, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="88232b23fd35d3fea08f86703b8e64c509c7e317d059cd04531811f95dd17e6c295aa7cbb78e812040457396c5b0e07bdf2bf08d303c5e0d4f9366b0afcfe1c02bd3c6d11704dcb8f6dc6d783e54421977b7c1d004b295b081e6d5cf3b537e84f902a9fc2a87d3d49dcfcee74d8129532cb400561a1b40c5ba7c32adae1d7f48cdd6d620b80a1d6da8f086ce6a13d40ba4165c9a", 0x94, 0xc800, 0xf850efad35b00831}, 0x10000) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="88232b23fd35d3fea08f86703b8e64c509c7e317d059cd04531811f95dd17e6c295aa7cbb78e812040457396c5b0e07bdf2bf08d303c5e0d4f9366b0afcfe1c02bd3c6d11704dcb8f6dc6d783e54421977b7c1d004b295b081e6d5cf3b537e84f902a9fc2a87d3d49dcfcee74d8129532cb400561a1b40c5ba7c32adae1d7f48cdd6d620b80a1d6da8f086ce6a13d40ba4165c9a", 0x94, 0xc800, 0xf850efad35b00831}, 0x10000) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xea, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xeb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x22, 0x40, 0x12345, {0x0, r7}}, 0x1) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x3, 0x1}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @initdev}, &(0x7f0000000280)=0xc) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x275, &(0x7f0000000000)={0x0, 0xd79e, 0x8, 0x2, 0x342, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x3, 0x1}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async, rerun: 64) r4 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) (async, rerun: 64) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async, rerun: 64) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @initdev}, &(0x7f0000000280)=0xc) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x275, &(0x7f0000000000)={0x0, 0xd79e, 0x8, 0x2, 0x342, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (rerun: 32) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xec, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xed, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) (rerun: 64) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x22, 0x40, 0x12345, {0x0, r7}}, 0x1) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xee, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xef, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:09 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) (rerun: 32) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async, rerun: 64) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x22, 0x40, 0x12345, {0x0, r7}}, 0x1) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf1, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 5: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:09 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f00005f0000/0x1000)=nil, 0x1000, 0x12}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x3ed8, 0x6dc, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf3, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 5: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) (async) fcntl$setsig(r2, 0xa, 0x11) (async) fcntl$setlease(r2, 0x400, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) (async) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf4, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:10 executing program 5: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) (async) fcntl$setsig(r2, 0xa, 0x11) (async) fcntl$setlease(r2, 0x400, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) (async) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:10 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:10 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f00005f0000/0x1000)=nil, 0x1000, 0x12}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x3ed8, 0x6dc, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f00005f0000/0x1000)=nil, 0x1000, 0x12}, 0x5) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_enter(r0, 0x3ed8, 0x6dc, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) (async) 00:56:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf5, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xea, 0x80, 0x4}, {0x6, 0xff, 0x8, 0x80000000}, {0x800, 0x12, 0x4, 0x1}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r4, 0x7, &(0x7f0000000500)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x5, 0xa, 0x1}, 0x62) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:10 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf6, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xea, 0x80, 0x4}, {0x6, 0xff, 0x8, 0x80000000}, {0x800, 0x12, 0x4, 0x1}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r4, 0x7, &(0x7f0000000500)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x5, 0xa, 0x1}, 0x62) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xea, 0x80, 0x4}, {0x6, 0xff, 0x8, 0x80000000}, {0x800, 0x12, 0x4, 0x1}]}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r4, 0x7, &(0x7f0000000500)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x5, 0xa, 0x1}, 0x62) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:10 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1241.799443][ T9554] net_ratelimit: 15051 callbacks suppressed [ 1241.799458][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.813035][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.819764][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.826381][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.833120][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.839798][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.846331][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.852981][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.859679][ T9554] dccp_time_wait: time wait bucket table overflow [ 1241.866280][ T9554] dccp_time_wait: time wait bucket table overflow 00:56:10 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f00005f0000/0x1000)=nil, 0x1000, 0x12}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x3ed8, 0x6dc, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) 00:56:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf8, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:10 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xea, 0x80, 0x4}, {0x6, 0xff, 0x8, 0x80000000}, {0x800, 0x12, 0x4, 0x1}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r4, 0x7, &(0x7f0000000500)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x5, 0xa, 0x1}, 0x62) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xf9, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @remote}}, 0x0) io_uring_enter(r0, 0x25c1, 0xf1d7, 0x1, &(0x7f0000000000)={[0x43a5f343]}, 0x8) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xfa, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) (async) r2 = socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @remote}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x25c1, 0xf1d7, 0x1, &(0x7f0000000000)={[0x43a5f343]}, 0x8) (async, rerun: 64) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xfb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x9, 0x2, 0x1, {0x0, r4, r0}}, 0x40) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r3, 0x80, &(0x7f0000000400)=@rc={0x1f, @any, 0x81}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000380)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x2) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) sendto$inet(r3, &(0x7f0000000980)="19ce295e73dc4632bbe1e1225bf6bce00bbd8c7ceb6bfd00177add52cd5d1220bb3edb2edebcae9fa5ddbc34faf38349dc692bff612253521a6231fc8c6a1c4e66d3634dfc29b59480bb145a5ca719b39a4033ca750d4e4330d2419950ac9662ec07fb111c08cce2c088a119fa105bee35dd7a000dd175df74385c69d87bd6cec3f28d2553f0a9e6fe601577dfee238b808becafe29b1be9bdc3a31defab18fa5944e4a171122091d71e7b5eed66a064737159b5b5bf7f6e2fd416ffa53aaf6aef7b2bcafcbaaf2a91edc32a466df7826085621835512f46eae5f525a62d40c35787dbe6863a1f543392a58f45e4987babdeaa00f79c758922280e44ce1c941173d57fceddf9607b0ea343200feb0daefe2c808a567a6e3f4256c9811be7db169ee0062a19fc835c4162a015275cfc7970f7292f520718c3b48f465f48fe4d2608b9fbadf16a6f431e3908d458ad37cb16e32ec850d0232924688e6eb4d2320c8e94f6ebfa4452d7a3a629b82c8a4114a908972dd0cd2e4725080df90543f3848152b20e0f49d35c07af123855d29f335d98057e5eb93ef298a3225ff27a2a8a6a0e9d46d30f6906478a2f04af98e3afa3a5bacf187bfc91938513c4ecf86c8b4296011db0458aaa039dcb059bd639e887b53128086df6845950137767c7c5509fe1056f0811401a4bf4c7d6a4fb7253ee6ea6f944f7e27f37aaa899368956d8bbf2590bd7e71301583080fa96b0fade0c86c724f806846e7b2a3ddb202f0322627eec34f4ecff88b0f52d0bc275324453804d5794f17336d52299870aceba08255b32c85f803891512f625ff292fe6e5c1338a28b2063850e90dbcc0fde89509a3f42a2a49702df0b068ae96570b33dca1a10e156f8456a5180f9f6163eabfd52853675ea7e6cd324e23d07ed888dd0edad521330639cedbe38ac9ea372200607c0e502a7134dbfadadfd7f070c2dc5cb9dd9135322529ad8892380b046facfb79eb7d6d7e45dbc19349f0ed447e6a268bd960fee2624ffe36006a48072a4fdda15db8419b153f5e56fc7f2668b5345dc8c90e70a23fafedeee11b781bdf5cc98d210170c6589ba9eb20895ffd7edc94a14a80eca565542d56f2f2534461aea5a3750c4dfa730165c3f54834917b163a8c59621862332e96ea61bd338033889cc2f66d392b446a6c97bb1de6ba34a65e6d05c2964d5095ab95f73307c86a37243dce2169beb9c722851b0ebb81d8c877c1bc9981c12d64536d587a6d04087511ed0442addda5486ccf296205212b81bf47cb4887d024121636b4186063bae9589e85a437e9fa6bb27c60d054cda3e37ea368836d3cb3d72273c1bb1513919bb59c189d358a6f9f64001414f0bf25aa4d84ecc88a3062b82c5272ea451c8cb68f41acba559c1822caff5995c761fa50295e093393d57a4ec9808ceba6c9116bd547ad264f7732942880ef3c14f656c987152a1299309f71c40b277f58e6b62305f4b315954550159e0a174cbfc6d2ea29f8b5f5831d52c8a666fb6bc4b0e685145ae349e33c63e7dde367cc0ceaa5626f87229aacb75337d517115e867c17b055840db341077d6628a395a0ae17665aff80b00da1c205a179c652dd11abb40ef05694fbe851c9b863b63e04a1c0384dbd16c28d91c51102aa96579a1ef0c1ade7727441409b5939350c5ca341804a90ba8c28be663e125b54c03931ce3d52ad8762dd82dcdd6aa4978b22581220477e3d66aa3e0cb9d104b7739f7578eb6efad290ec4b60610da5065022f1b2ddf98b916462efb08f6af40655c943cce9725acc37be33b4d8b1652999587d5c79a56e15b2d8e26874a0d02ccab8ea407493523372929790df0c51051dfc04c3c750dcbedf65b1f7f7955e4b9e645f43da16b08b87a10780a84ca12f92e621d489e5444ddd6963ec12ec41c6cefedfe7dc476eff9098a3610542fd230590715bf558bc51a014fa68b66baacd2ba5f8e50fc60c0e748cfe0824c36b657f1e977e8cc1fe8b49c8bd5e2b8050a2d5736184d558d500a3740ba8d62f8d9a65a44e4443a7201aed450a9ea130f4df2c4f647bbbb77ede78bd827d100534d07fdee4c3a705ca7f340c6f540a41be01e0059f6c1a95695b31b9581ba2024dc3d0d5a4a6a46d2e42ade9741b848313ebca7883556dc7422a27189ac9bafb2d7077261e0160cce10e34cb2b6068afd3e8eb546d90fe056b0a3e401e6cc80404e030dfb9a9761ee0d7204b1cd8039728b387f84121408dd02e6b89cb5e101a505da5242bc14e3a300e84bb34ed0ae71631ac7e8cfae5e5ca9bfb03b8eb2eb704d2b60b13c64ea5de8419a321d3f07716f85a74e95812285eb114b5aa4fc8cbf9a4d46855cfc7e9f004b47a001b5afd69c260dad3586511e6597e93abf9c2136e341a91705c3a47c86c234e20b30c1e0494bbb42aca6bf40cb428a086120c1759a864dced8bd206b6ff8e866f4472c17efb334ce09087a5f621142ff4b11dc2a5644fe4b75f945842701dbf4b1d2ca4acd42b6ae4a5785244a0b6ff3a0f64cdb820487dba13affe71de42e57ed8dc065feda9b8f45b541e4453dbb7a808cb1d476f0b33669dd86c42d1b46c4cc84ddccb788fb658951860f181c36bab8de5a89d88d689bb1f1acc2f34814b4a5ac91420b616e8e11533a90677ccc8601d9e6000af8a19db069043fb7d64dd7c2d8c0ed3df8b904b886990e95126b14400d0518c24f46f38b0a8fed72e16d6bd91e51717981933bc3fd6787577b5cbfaa8680c1d0cb882bf5d3db96fc3b2d27fced603da3d32ea894ca3993758f4c6af2605f9311a252d1020232855acc923193c7db6d4755e6db1fd41ee052b7c8c8e8417ee36ee09dabb7d6276214ff9c17e10417e658ad7b1798cb87968f5e41968214caa4f128879bf384ca86d31e5c18ddb30699ce47face965db1edcfa8bd5629ede10e6cfbc9e7c9b512e8d78603b1ba24a892f27749aaf713331b7848b0c77eeca9ba09c5e346cfd0236b39f6b47873000f98457f169ef28e66cf6564d2c150545e684a7dc24ea51d224a73b32e828d8bd7248ebf3f7bac90c0b5e39bd834a343190ef14af3549b1a75a78099c338947980905142d3580894e891d32b7d224ddbc4564bccc4504fa7a16870a22faa9058f7e3dc97b357d9542f8455ac77bbd9e85ead6903846b0c7e2722d50fc26aa9fad2cf19b9f1e75224871d97a626362d208776bb8edb42d89d731e2c9958c97d98181b097c8dd23208f48df9fd395bb3023afa2801c581da3c470d59c4414dc643f513efad6b3441b3c595c95e26bd399f29a11f1b15d38bb7c821e5b70eb19e5505d0c2a0cad2ef431575fa19854fc2974ffed6f1c2bfa33d985b1d543c629a493777fcbf742d9d54f56e77a8ea546ebfdc929ccc5ab7d8f27683b393bbc04f11ba5c42e60c0803e60168872f2eaf0f3f604e1542f6a8593355edd0295fa4b9810fd197edb07da522298dc4b7537c16ee02581db9de854ab456dbd9e8df22cedf1ecfb7b95ad5a48a3708e53c293083765901dc7e3564c1de94e75ba383399499d69ba622073cf2a68cbc3440230277ae13951e5fac7df2e112fafe041200547e9200f74fca9e3f4025ca998859024ffe5ae8e692a883a50d9ef0c9272536491440ddce56a9594b14d0bc9da62e34ae26d706b6417e6d36733920615b8fba85140d71f606f735a7a9971bd8ae7ff7f31c3974b05f4c81a917a5297496316653da7ea7ac51095b8a2bd427ba5feabe7665ed289f845a67b267dbc98cd3c1c8087558abd9979bf1148adf452c70eae5ae301f26580ccdd5bd15cfd9ee8be0e8d3b7d153c55feceebb8d4ecd3580f1de91623b18967a337f4ec98e6384782fc67d268748d73457d113b184bb40aba930772c47694c7a0800f3c6d4abbc14beb7bc5b9be7c11bf9e2f58293778233d8277caea8c7e69a77a357674e0d55f778b87bf73e64d8f1b8b411da72e5257b265fdc19d5ddccbb9f1946e1a9956dc933e95b47e236809aea81d7d591f39d40e3ff1ea7c2a9e053c2b5d87336a5cc5f10d82e80f5f0bfa829d092bd90d0c68892bcda0c8bc9ffd248d0d31bc8c4b53178fd8f0c3743f13e317e899da49f27aef2e5698dd4a6a871d2e498d2382decfbacb1026b79dcd50ab89c1b77fda527b391fa67311778c7ef6a26a8ddabc5fc3a22883ab301e2c722dfbd19d28bc9f373daa38022b6a844881e902b53e86c2272e28c27c9d938d80ba8d1d44337050c6ecd9e8659b8231532ec30c38934374ffc6cf84131898a4f59820be6f52e5cdaebc3cdf61ca9b029b8c452154a6f64a0e2d891a98c7f3fb496171dc680f512c5a9748ea67e505c1db677026967b54cce059ef53efbe88c97279143a47dea8ed196f9b760b448beb4b6feac606bbcec9721797799f44368cce890b45c65306ae5f06287874216144f6c251bb2a4b78fd4d888e73a6c0c8218c9718710f8e5624d0e34c8fbe9f51ed599c2d78c278e6ec74ce43bf9a96ba3fd52cb1ef8688ed6d31a2f5bd7d9722f1e5478ee1054985e00b66d160f74a20e7ebe2412d040f884747c3216a57328b24114a388d4bffcff5f25da2d7dfec962f94ee3a9bb007ba2cb0c3159f115f179bc32735a39b00dc4d9cd37d614df0592bbb02301baa2ce61a839e11a296158e1961c2f4021b5ce1de7bbd39684c76f6e0f16a680df6418a5e592c069f4e4a516bae81666e654e4798bf570f1b52ec7289175888bb3ed23f6f877351522866435079f27840a7828a6a2904db512fb9c0ad9ae98f32ef4e23f1f6f49f62641bc2903438ce71caa7286625da8de7fc6a6ee06072137f5248add0afa3865000f4ad93eb8e3b768b98d532b80f8900fde2075b8c01b9aad1d1b2caeaa4b03e3bc524cf6bf08a4912f0d5a36e3f35edccdc932d848240baca1245ee6937248229a3da2e0c78ef72d9904adb5ec79c122dcb61af173932d26795e24ad520a43bb52a472d4cc327b7bf32d679e78be33c56af1c78474cf8ed2365534776ac89e082b57cc8125d7ccde6568cb9ccac11ccd2a431f0475da4813ac7ec291c25e54b83a70b4f62ea6d2d3c7d03a17c71ee832ce1c7d2162b9eaaa1e59f0e85993f64b6d51dd5a7da54b14e82572f364707647ab11b38f8aab0d7939d50292665d44d1bcacc6c29e00ad3e9e588321f801f283a58171bf1a61526812bc382fd6ec4f5dcf23c4a57d0a8b9eab7158e2a8f07760e99ce200cffc873453475ee924385844589cd42cb76c7c06690ab34d2822e4f826251f3486746409c199f24a986b7aa0f2e1199efe63d6b06430f8376f7aadb52f1d566c514f9fef13fb52bce9b475ab17fb8cb4b34a1f55b4e72670918e04ed26f6a2c4a0ea2ae30ac90082ced3960d379a101bfc63dfe26a9556eae581d812ab39d68ba638a80cd7eadc47cee06790f6dc8433a8feae0810abdee76cefdc52829d6a02dad861d24f6a9b47492110fd2447d9b094bcf29ab7e333be1f2fa8d550000c8e7e7f5feee34acdacd57e99d79f8da8d0becbcdc34856bcbe65fce20c412bbcdc691edf1156433d16e261f5d728bb3b59d58048a74c8b482d9fc8a17d25f7b4392d08be79c2a269d018be12fdc41ea482285406005df9eaee37da4a54e1627682c4ab9b70e9a92a22961e4826b44f2863c16e910e7c47fc50f277ea4047e1e821bf3559fb3a413af36fd57bbc00095b0e5008b7587d6627d2b479c453cb8db44dd04ef83c71e195d0bc9571c04072ec61cd447c59f064ffe4752db064d769735940070f8006c97be9", 0x1000, 0x40090, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @remote}}, 0x0) io_uring_enter(r0, 0x25c1, 0xf1d7, 0x1, &(0x7f0000000000)={[0x43a5f343]}, 0x8) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @remote}}, 0x0) (async) io_uring_enter(r0, 0x25c1, 0xf1d7, 0x1, &(0x7f0000000000)={[0x43a5f343]}, 0x8) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xfd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 5: r0 = syz_clone(0x98101400, &(0x7f00000000c0)="52527dd8e15ced99b69d22d2a125317ab2b5abfecb9a84632f49193ce5906b3da803505b6d9845432546817ca20ce05995fb22d978", 0x35, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000380)="41df39f985bf5e767f9500cda01d0f51798b5742df42f3e4d60e266b04f3c3a6de5afc4b3fa3670506bea394206121ee42028e1765c596c8078abef82cd75a849166ecf39fba12a89e3ed0505c5753e6d5ac04adc63a3882a8be56a0ec997b4ef905247e869ad79ec2a17d") capset(&(0x7f0000000280)={0x20071026, r0}, &(0x7f0000000400)={0x76, 0x5, 0x80000000, 0x4, 0x9, 0x1}) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) close(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000100)=0xc, 0x4) r4 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={r0, 0xee00, r4}, 0xc) r5 = socket$inet(0x2, 0x6, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000480), &(0x7f0000000080)=0xfffffe80) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd=r6, 0x100000001, 0x9, 0x5, 0xe, 0x0, {0x3}}, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1242.305690][ T9640] __nla_validate_parse: 35 callbacks suppressed [ 1242.305706][ T9640] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:11 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x9, 0x2, 0x1, {0x0, r4, r0}}, 0x40) (async) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r3, 0x80, &(0x7f0000000400)=@rc={0x1f, @any, 0x81}}, 0x0) (async) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000380)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x2) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) sendto$inet(r3, &(0x7f0000000980)="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", 0x1000, 0x40090, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:11 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0xfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 5: r0 = syz_clone(0x98101400, &(0x7f00000000c0)="52527dd8e15ced99b69d22d2a125317ab2b5abfecb9a84632f49193ce5906b3da803505b6d9845432546817ca20ce05995fb22d978", 0x35, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000380)="41df39f985bf5e767f9500cda01d0f51798b5742df42f3e4d60e266b04f3c3a6de5afc4b3fa3670506bea394206121ee42028e1765c596c8078abef82cd75a849166ecf39fba12a89e3ed0505c5753e6d5ac04adc63a3882a8be56a0ec997b4ef905247e869ad79ec2a17d") capset(&(0x7f0000000280)={0x20071026, r0}, &(0x7f0000000400)={0x76, 0x5, 0x80000000, 0x4, 0x9, 0x1}) (async) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) close(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000100)=0xc, 0x4) r4 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={r0, 0xee00, r4}, 0xc) r5 = socket$inet(0x2, 0x6, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000480), &(0x7f0000000080)=0xfffffe80) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd=r6, 0x100000001, 0x9, 0x5, 0xe, 0x0, {0x3}}, 0x5) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x102, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 5: r0 = syz_clone(0x98101400, &(0x7f00000000c0)="52527dd8e15ced99b69d22d2a125317ab2b5abfecb9a84632f49193ce5906b3da803505b6d9845432546817ca20ce05995fb22d978", 0x35, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000380)="41df39f985bf5e767f9500cda01d0f51798b5742df42f3e4d60e266b04f3c3a6de5afc4b3fa3670506bea394206121ee42028e1765c596c8078abef82cd75a849166ecf39fba12a89e3ed0505c5753e6d5ac04adc63a3882a8be56a0ec997b4ef905247e869ad79ec2a17d") capset(&(0x7f0000000280)={0x20071026, r0}, &(0x7f0000000400)={0x76, 0x5, 0x80000000, 0x4, 0x9, 0x1}) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000100)=0xc, 0x4) r4 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={r0, 0xee00, r4}, 0xc) r5 = socket$inet(0x2, 0x6, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r6, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r7}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000480), &(0x7f0000000080)=0xfffffe80) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd=r6, 0x100000001, 0x9, 0x5, 0xe, 0x0, {0x3}}, 0x5) (rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x103, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1242.514860][ T9665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1242.578974][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:11 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x9, 0x2, 0x1, {0x0, r4, r0}}, 0x40) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r3, 0x80, &(0x7f0000000400)=@rc={0x1f, @any, 0x81}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000380)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x2) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) sendto$inet(r3, &(0x7f0000000980)="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", 0x1000, 0x40090, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket(0x40000000015, 0x5, 0x0) (async) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x9, 0x2, 0x1, {0x0, r4, r0}}, 0x40) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r3, 0x80, &(0x7f0000000400)=@rc={0x1f, @any, 0x81}}, 0x0) (async) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f0000000380)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r4}}, 0x2) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) sendto$inet(r3, &(0x7f0000000980)="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", 0x1000, 0x40090, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x104, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x105, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x106, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1242.704715][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1242.714194][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:11 executing program 3: r0 = syz_io_uring_setup(0x5d30, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = socket$packet(0x11, 0x1, 0x300) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) io_uring_enter(r0, 0x2c3f, 0x373c, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x10}, 0x0, {0x0, r9}}, 0xfffffff7) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000000) memfd_secret(0x80000) r10 = socket(0x40000000009, 0xa, 0x2) recvmsg(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x107, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x108, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:11 executing program 1: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1242.999599][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1243.018428][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x109, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1243.093326][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1243.104887][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:13 executing program 3: r0 = syz_io_uring_setup(0x5d30, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = socket$packet(0x11, 0x1, 0x300) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) (async) io_uring_enter(r0, 0x2c3f, 0x373c, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x10}, 0x0, {0x0, r9}}, 0xfffffff7) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000000) memfd_secret(0x80000) (async) r10 = socket(0x40000000009, 0xa, 0x2) recvmsg(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 00:56:13 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x10a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:13 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:13 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x10b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:13 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1244.272689][ T9780] selinux_netlink_send: 59 callbacks suppressed [ 1244.272710][ T9780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9780 comm=syz-executor.2 [ 1244.294672][ T9785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9785 comm=syz-executor.0 00:56:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x10c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x10d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:13 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1244.326118][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:15 executing program 3: r0 = syz_io_uring_setup(0x5d30, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = socket$packet(0x11, 0x1, 0x300) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) (async) io_uring_enter(r0, 0x2c3f, 0x373c, 0x3, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x10}, 0x0, {0x0, r9}}, 0xfffffff7) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000000) memfd_secret(0x80000) r10 = socket(0x40000000009, 0xa, 0x2) recvmsg(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 00:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:15 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x10e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:15 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:15 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:15 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x10f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:15 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1246.326102][ T9814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9814 comm=syz-executor.2 [ 1246.343219][ T9817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9817 comm=syz-executor.0 00:56:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x110, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1246.418078][ T9834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9834 comm=syz-executor.2 [ 1246.809925][ T9823] net_ratelimit: 19078 callbacks suppressed [ 1246.809984][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.822970][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.829919][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.836494][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.843634][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.850372][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.857036][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.863741][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.870462][ T9823] dccp_time_wait: time wait bucket table overflow [ 1246.877075][ T9823] dccp_time_wait: time wait bucket table overflow 00:56:17 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) 00:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x111, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x112, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1248.283582][ T9848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9848 comm=syz-executor.0 [ 1248.304720][ T9851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9851 comm=syz-executor.2 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x113, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x114, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x115, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1248.330558][ T9848] __nla_validate_parse: 4 callbacks suppressed [ 1248.330571][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1248.353711][ T9851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1248.418954][ T9873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9873 comm=syz-executor.2 [ 1248.456165][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:17 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) (async) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) 00:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x116, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:17 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x117, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1248.591398][ T9894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9894 comm=syz-executor.2 [ 1248.591980][ T9892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9892 comm=syz-executor.0 [ 1248.623541][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x118, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1248.634834][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1248.685472][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1248.719430][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:17 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) (async, rerun: 32) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x119, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:17 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x11a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x11b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1248.848322][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1248.860704][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:17 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x11c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1248.919102][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:17 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:17 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x11d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:18 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x11e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:18 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:18 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x11f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x120, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:18 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1249.283977][T10001] selinux_netlink_send: 9 callbacks suppressed [ 1249.283990][T10001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10001 comm=syz-executor.2 [ 1249.285768][T10003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10003 comm=syz-executor.0 00:56:18 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:18 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x121, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x122, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:18 executing program 1: syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x123, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1249.545245][T10036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10036 comm=syz-executor.2 [ 1249.545892][T10037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10037 comm=syz-executor.0 [ 1249.614948][T10049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10049 comm=syz-executor.2 00:56:18 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x28000, 0x80) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x124, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 1: syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 1: syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x125, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:18 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:56:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:18 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1249.842997][T10075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10075 comm=syz-executor.2 [ 1249.855904][T10077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10077 comm=syz-executor.0 [ 1249.900218][T10088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10088 comm=syz-executor.2 00:56:19 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x28000, 0x80) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x126, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x127, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x128, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1250.138176][T10119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10119 comm=syz-executor.0 [ 1250.152646][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10118 comm=syz-executor.2 00:56:19 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x28000, 0x80) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x129, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x12a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x12b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) syz_io_uring_setup(0x6271, &(0x7f0000000400)={0x0, 0x1f66, 0xc, 0x2, 0x54}, &(0x7f00005f0000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) close_range(r4, r5, 0x2) 00:56:19 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x12c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x12d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x12e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) (async) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) syz_io_uring_setup(0x6271, &(0x7f0000000400)={0x0, 0x1f66, 0xc, 0x2, 0x54}, &(0x7f00005f0000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async) close_range(r4, r5, 0x2) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x12f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x130, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x131, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) (async) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) (async) syz_io_uring_setup(0x6271, &(0x7f0000000400)={0x0, 0x1f66, 0xc, 0x2, 0x54}, &(0x7f00005f0000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) close_range(r4, r5, 0x2) 00:56:19 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x132, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x133, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x134, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:19 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x8) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x135, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x136, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x137, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:20 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r4, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x8) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x8) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x138, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x139, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:20 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x8) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 64) 00:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:20 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x13a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x13b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:20 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r2, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x13c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1251.819396][T10372] net_ratelimit: 12956 callbacks suppressed [ 1251.819410][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.832234][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.838873][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.845550][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.852210][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.858885][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.865716][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.872307][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.878889][T10372] dccp_time_wait: time wait bucket table overflow [ 1251.885608][T10372] dccp_time_wait: time wait bucket table overflow 00:56:20 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0xc0400) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000040)=0xc250, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x13d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r2, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x13e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r1, 0xa, 0x11) r2 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r2, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x13f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0xc0400) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000040)=0xc250, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (rerun: 64) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 64) 00:56:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x140, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x141, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0), 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x142, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:21 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0xc0400) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000040)=0xc250, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 64) 00:56:21 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0), 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x143, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0), 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x144, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:21 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x145, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x146, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:21 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x147, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:21 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x4a0202, 0x1d5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x148, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x149, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x14a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:22 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x6, 0x401, 0xfc01}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x14b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x14c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1253.377920][T10580] __nla_validate_parse: 53 callbacks suppressed [ 1253.377966][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1253.414560][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x14d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:22 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 64) r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x6, 0x401, 0xfc01}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x14e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1253.594878][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1253.632836][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x14f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1253.684744][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:22 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) (rerun: 64) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x6, 0x401, 0xfc01}, 0x8) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x150, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1253.726534][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x151, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1253.798157][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1253.856919][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:22 executing program 3: setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x7ff, 0xa71, 0x7, 0x6b6}, 0x8) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x152, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x153, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1253.951885][T10671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1253.988127][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:23 executing program 3: setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x7ff, 0xa71, 0x7, 0x6b6}, 0x8) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x154, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 5: syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x155, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 5: syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x156, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 5: syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 3: setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x7ff, 0xa71, 0x7, 0x6b6}, 0x8) (async) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x157, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x158, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1254.324152][T10724] selinux_netlink_send: 63 callbacks suppressed [ 1254.324165][T10724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10724 comm=syz-executor.0 [ 1254.326429][T10727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10727 comm=syz-executor.2 00:56:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1254.432463][T10742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10742 comm=syz-executor.0 00:56:23 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a94, &(0x7f0000000000)={0x0, 0x21fb, 0x20, 0x0, 0x31, 0x0, r0}, &(0x7f0000145000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x159, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:23 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x15a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x8) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x15b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x15c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1254.550823][T10754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10754 comm=syz-executor.2 [ 1254.568622][T10753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10753 comm=syz-executor.0 00:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1254.647013][T10768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10768 comm=syz-executor.2 [ 1254.682122][T10772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10772 comm=syz-executor.0 00:56:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x15d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a94, &(0x7f0000000000)={0x0, 0x21fb, 0x20, 0x0, 0x31, 0x0, r0}, &(0x7f0000145000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x6a94, &(0x7f0000000000)={0x0, 0x21fb, 0x20, 0x0, 0x31, 0x0, r0}, &(0x7f0000145000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x15e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x15f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1254.963629][T10803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10803 comm=syz-executor.0 [ 1254.964532][T10804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10804 comm=syz-executor.5 [ 1254.996024][T10798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10798 comm=syz-executor.2 00:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x160, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x161, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) syz_io_uring_setup(0x6271, &(0x7f0000000400)={0x0, 0x1f66, 0xc, 0x2, 0x54}, &(0x7f00005f0000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) close_range(r4, r5, 0x2) 00:56:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:24 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a94, &(0x7f0000000000)={0x0, 0x21fb, 0x20, 0x0, 0x31, 0x0, r0}, &(0x7f0000145000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x6a94, &(0x7f0000000000)={0x0, 0x21fb, 0x20, 0x0, 0x31, 0x0, r0}, &(0x7f0000145000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x162, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x163, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x164, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) syz_io_uring_setup(0x6271, &(0x7f0000000400)={0x0, 0x1f66, 0xc, 0x2, 0x54}, &(0x7f00005f0000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) close_range(r4, r5, 0x2) 00:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:24 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f0000000000), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x165, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x166, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x167, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:24 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) syz_io_uring_setup(0x6271, &(0x7f0000000400)={0x0, 0x1f66, 0xc, 0x2, 0x54}, &(0x7f00005f0000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) close_range(r4, r5, 0x2) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f0000000000), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x168, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x169, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1256.007756][T10918] sch_tbf: burst 0 is lower than device veth357 mtu (1514) ! [ 1256.091922][T10932] sch_tbf: burst 0 is lower than device veth359 mtu (1514) ! [ 1256.100408][T10937] sch_tbf: burst 0 is lower than device veth359 mtu (1514) ! 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:25 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) syz_io_uring_setup(0x6271, &(0x7f0000000400)={0x0, 0x1f66, 0xc, 0x2, 0x54}, &(0x7f00005f0000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:56:25 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f0000000000), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000000), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x16a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x16b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x16c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x16d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1256.393144][T10967] sch_tbf: burst 0 is lower than device veth361 mtu (1514) ! [ 1256.418159][T10970] sch_tbf: burst 0 is lower than device veth361 mtu (1514) ! 00:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) [ 1256.506344][T10992] sch_tbf: burst 0 is lower than device veth363 mtu (1514) ! [ 1256.545027][T10994] sch_tbf: burst 0 is lower than device veth363 mtu (1514) ! 00:56:25 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x16e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:25 executing program 3: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_setup(0x985, &(0x7f0000000240)={0x0, 0x10000000, 0x0, 0x0, 0x100}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) recvmsg(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001440)={&(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x2, @private2, 0x2}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)="27205e4fb9576d539296", 0xa}], 0x1}, 0x0, 0x20000000}, 0x2) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r3, 0x0, &(0x7f0000000380)="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", 0x1000, 0x870a95be64006212, 0x0, {0x0, r9}}, 0xfff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x16f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x170, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:25 executing program 3: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_setup(0x985, &(0x7f0000000240)={0x0, 0x10000000, 0x0, 0x0, 0x100}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) recvmsg(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001440)={&(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x2, @private2, 0x2}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)="27205e4fb9576d539296", 0xa}], 0x1}, 0x0, 0x20000000}, 0x2) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r3, 0x0, &(0x7f0000000380)="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", 0x1000, 0x870a95be64006212, 0x0, {0x0, r9}}, 0xfff) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1256.784398][T11011] sch_tbf: burst 0 is lower than device veth365 mtu (1514) ! [ 1256.797095][T11023] sch_tbf: burst 0 is lower than device veth365 mtu (1514) ! [ 1256.831004][T11020] net_ratelimit: 15382 callbacks suppressed [ 1256.831018][T11020] dccp_time_wait: time wait bucket table overflow [ 1256.845169][T11006] dccp_time_wait: time wait bucket table overflow [ 1256.852625][T11006] dccp_time_wait: time wait bucket table overflow [ 1256.856876][T11031] sch_tbf: burst 0 is lower than device veth367 mtu (1514) ! [ 1256.867010][T11020] dccp_time_wait: time wait bucket table overflow [ 1256.875659][T11020] dccp_time_wait: time wait bucket table overflow [ 1256.884377][T11020] dccp_time_wait: time wait bucket table overflow [ 1256.891131][T11020] dccp_time_wait: time wait bucket table overflow [ 1256.897956][T11006] dccp_time_wait: time wait bucket table overflow [ 1256.904864][T11006] dccp_time_wait: time wait bucket table overflow [ 1256.911592][T11006] dccp_time_wait: time wait bucket table overflow 00:56:25 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x3f, 0x2}], '&S\''}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xa, 0x4}, {0xc, 0x2}, {}, {0x7, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000140)=""/23, 0x86, 0x17, 0x1}, 0x20) 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x171, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:25 executing program 3: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) syz_io_uring_setup(0x985, &(0x7f0000000240)={0x0, 0x10000000, 0x0, 0x0, 0x100}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) recvmsg(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001440)={&(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x2, @private2, 0x2}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)="27205e4fb9576d539296", 0xa}], 0x1}, 0x0, 0x20000000}, 0x2) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r3, 0x0, &(0x7f0000000380)="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", 0x1000, 0x870a95be64006212, 0x0, {0x0, r9}}, 0xfff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x2}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) syz_io_uring_setup(0x985, &(0x7f0000000240)={0x0, 0x10000000, 0x0, 0x0, 0x100}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000040)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) recvmsg(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001440)={&(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x2, @private2, 0x2}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)="27205e4fb9576d539296", 0xa}], 0x1}, 0x0, 0x20000000}, 0x2) (async) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r3, 0x0, &(0x7f0000000380)="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", 0x1000, 0x870a95be64006212, 0x0, {0x0, r9}}, 0xfff) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x172, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x173, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x174, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x175, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x176, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x177, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:26 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x178, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x179, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x17a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:26 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x17b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:26 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x17c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x17d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:27 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:27 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) splice(r0, &(0x7f0000000000)=0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xa72, 0x1, 0x4) 00:56:27 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:56:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x17e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:27 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:27 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 00:56:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x17f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:56:27 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1258.418209][T11255] __nla_validate_parse: 51 callbacks suppressed [ 1258.418230][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1258.464738][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1258.523954][T11266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:27 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 00:56:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x180, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:27 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) splice(r0, &(0x7f0000000000)=0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xa72, 0x1, 0x4) 00:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:56:27 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:27 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:27 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:27 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 1258.711829][T11281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1258.741224][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x181, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:56:27 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1258.802909][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x182, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1258.852009][T11308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:27 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) splice(r0, &(0x7f0000000000)=0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xa72, 0x1, 0x4) 00:56:27 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:56:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 1258.983499][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1259.019485][T11317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x183, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1259.156633][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:28 executing program 3: r0 = syz_io_uring_setup(0x2299, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f00005f1000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x200, @mcast1, 0x5}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}], 0x3c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x5894, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_enter(r0, 0x45b9, 0xbe67, 0x2, &(0x7f0000000040)={[0x24c]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x184, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:56:28 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:28 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x185, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:56:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:56:28 executing program 3: r0 = syz_io_uring_setup(0x2299, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f00005f1000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x200, @mcast1, 0x5}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}], 0x3c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x5894, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_enter(r0, 0x45b9, 0xbe67, 0x2, &(0x7f0000000040)={[0x24c]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x186, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1259.494866][T11380] selinux_netlink_send: 52 callbacks suppressed [ 1259.494904][T11380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11380 comm=syz-executor.0 [ 1259.498955][T11381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11381 comm=syz-executor.2 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x187, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 3: r0 = syz_io_uring_setup(0x2299, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f00005f1000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 64) r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 64) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (rerun: 32) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x200, @mcast1, 0x5}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}], 0x3c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x5894, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 64) io_uring_enter(r0, 0x45b9, 0xbe67, 0x2, &(0x7f0000000040)={[0x24c]}, 0x8) (rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1259.559172][T11392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11392 comm=syz-executor.0 00:56:28 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x188, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:28 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file1\x00', 0x118, 0x2, 0x31713}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000000}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r7, &(0x7f0000000100)='.pending_reads\x00', 0x7a1d42, 0x0) 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x189, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x18a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) [ 1259.790121][T11416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11416 comm=syz-executor.2 [ 1259.804188][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11415 comm=syz-executor.0 [ 1259.873232][T11432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11432 comm=syz-executor.2 00:56:28 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x400, {0x0, r3}, 0x39c9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1f) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x18b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:28 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32) socket$inet(0x2, 0x6, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file1\x00', 0x118, 0x2, 0x31713}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000000}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (rerun: 32) openat$incfs(r7, &(0x7f0000000100)='.pending_reads\x00', 0x7a1d42, 0x0) 00:56:28 executing program 5: r0 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x18c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file1\x00', 0x118, 0x2, 0x31713}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000000}, 0x0) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) (async) creat(&(0x7f0000000100)='./file1\x00', 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r7, &(0x7f0000000100)='.pending_reads\x00', 0x7a1d42, 0x0) 00:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x18d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1260.089938][T11455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11455 comm=syz-executor.0 [ 1260.104084][T11457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11457 comm=syz-executor.2 [ 1260.168729][T11476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11476 comm=syz-executor.0 00:56:29 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x400, {0x0, r3}, 0x39c9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1f) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd_index=0x7, 0x5a49, &(0x7f0000000000), 0x0, 0x3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x18e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x18f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1260.295619][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11487 comm=syz-executor.0 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x190, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:29 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x400, {0x0, r3}, 0x39c9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x1f) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd_index=0x7, 0x5a49, &(0x7f0000000000), 0x0, 0x3}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x191, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:29 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101c02, 0x0, 0x2}, 0x18) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x192, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x193, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1260.856395][T11540] ================================================================== [ 1260.864509][T11540] BUG: KCSAN: data-race in dccp_disconnect / dccp_poll [ 1260.871366][T11540] [ 1260.873674][T11540] write to 0xffff888137b9f7a2 of 1 bytes by task 11556 on cpu 0: [ 1260.881369][T11540] dccp_disconnect+0x4d9/0x5f0 [ 1260.886118][T11540] __inet_stream_connect+0x5cc/0x6d0 [ 1260.891386][T11540] inet_stream_connect+0x44/0x70 [ 1260.896305][T11540] __sys_connect_file+0xd3/0xe0 [ 1260.901137][T11540] io_issue_sqe+0x607b/0xaac0 [ 1260.905811][T11540] io_wq_submit_work+0x41b/0x590 [ 1260.910747][T11540] io_worker_handle_work+0x517/0xc50 [ 1260.916014][T11540] io_wqe_worker+0x1d1/0x940 [ 1260.920584][T11540] ret_from_fork+0x1f/0x30 [ 1260.925007][T11540] [ 1260.927328][T11540] read to 0xffff888137b9f7a2 of 1 bytes by task 11540 on cpu 1: [ 1260.934934][T11540] dccp_poll+0xe0/0x3c0 [ 1260.939072][T11540] sock_poll+0x23e/0x260 [ 1260.943294][T11540] __io_arm_poll_handler+0x1b9/0x570 [ 1260.948570][T11540] io_arm_poll_handler+0x370/0x430 [ 1260.953674][T11540] io_queue_async+0x7b/0x160 [ 1260.958256][T11540] io_submit_sqe+0x3a17/0x3f50 [ 1260.963006][T11540] io_submit_sqes+0x27b/0x500 [ 1260.967674][T11540] __se_sys_io_uring_enter+0x24b/0xd60 [ 1260.973122][T11540] __x64_sys_io_uring_enter+0x74/0x80 [ 1260.978487][T11540] do_syscall_64+0x2b/0x70 [ 1260.982891][T11540] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1260.988771][T11540] [ 1260.991074][T11540] value changed: 0x03 -> 0x00 [ 1260.995726][T11540] [ 1260.998137][T11540] Reported by Kernel Concurrency Sanitizer on: [ 1261.004284][T11540] CPU: 1 PID: 11540 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-00152-g620725263f42-dirty #0 [ 1261.015290][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1261.025346][T11540] ================================================================== 00:56:30 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd_index=0x7, 0x5a49, &(0x7f0000000000), 0x0, 0x3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd_index=0x7, 0x5a49, &(0x7f0000000000), 0x0, 0x3}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) (async) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x194, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:30 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x30}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x195, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x196, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1261.198838][T11571] tbf_change: 42 callbacks suppressed [ 1261.198849][T11571] sch_tbf: burst 127 is lower than device veth415 mtu (1514) ! [ 1261.230665][T11580] sch_tbf: burst 127 is lower than device veth415 mtu (1514) ! [ 1261.306588][T11588] sch_tbf: burst 127 is lower than device veth417 mtu (1514) ! 00:56:30 executing program 3: pipe2(&(0x7f00000017c0)={0xffffffffffffffff}, 0x80000) r1 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x9875, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000001800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1c7a660a61c8aed5, 0x0, 0x6, 0x0, &(0x7f0000000380)="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", 0x1, 0x0, 0x0, {0x3}}, 0x0) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001380)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d6000000a64d906334ba93c1fd05bb2037c0172f20008d463f81218ee2820fc304f975f9c2dffc1a8174ef8c2047fcce2f0cc912fb78528a5a1a1527bd4c1417e023be27241535b14a22444880b4a73cf00f3679f5040c5eca8ee430f96080c8bb1b0dd7a3e4f4a176ef86968842ecb6fdfc489b668c4727deee316214fb0c2f905564e696074e0d846f9d4d8200c4a3c7cc7f9dfc6dd61eab53ce47926cd327ed40eb10713dc2f30b0bcf658ae4a9603d6d98f6978a40851bc5e676ea771be5bfb543fe92022d7ca6af7a2fc26799da966f0b62f99a0d8c0a43"], &(0x7f0000000100)=0xfa) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7f) syz_io_uring_setup(0x2a3e, &(0x7f0000001480)={0x0, 0xe605, 0x1, 0x0, 0x391, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ef000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000001780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001740)={&(0x7f0000001500)=@can, 0x80, &(0x7f0000001700)=[{&(0x7f0000001580)=""/68, 0x44}, {&(0x7f0000001600)=""/30, 0x1e}, {&(0x7f0000001640)=""/152, 0x98}], 0x3}, 0x0, 0x10101, 0x0, {0x1}}, 0x2) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x197, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:30 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x198, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0), 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0), 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x199, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0), 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x19a, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1261.488046][T11611] sch_tbf: burst 127 is lower than device veth419 mtu (1514) ! [ 1261.503035][T11610] sch_tbf: burst 127 is lower than device veth417 mtu (1514) ! 00:56:30 executing program 3: pipe2(&(0x7f00000017c0)={0xffffffffffffffff}, 0x80000) r1 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x9875, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000001800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1c7a660a61c8aed5, 0x0, 0x6, 0x0, &(0x7f0000000380)="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", 0x1, 0x0, 0x0, {0x3}}, 0x0) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0xfa) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7f) syz_io_uring_setup(0x2a3e, &(0x7f0000001480)={0x0, 0xe605, 0x1, 0x0, 0x391, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ef000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000001780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001740)={&(0x7f0000001500)=@can, 0x80, &(0x7f0000001700)=[{&(0x7f0000001580)=""/68, 0x44}, {&(0x7f0000001600)=""/30, 0x1e}, {&(0x7f0000001640)=""/152, 0x98}], 0x3}, 0x0, 0x10101, 0x0, {0x1}}, 0x2) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x19b, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000001400)=""/233, 0xe9}], 0x3, &(0x7f0000001540)=""/4096, 0x1000}, 0x40000000) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 3: pipe2(&(0x7f00000017c0)={0xffffffffffffffff}, 0x80000) r1 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x9875, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000001800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1c7a660a61c8aed5, 0x0, 0x6, 0x0, &(0x7f0000000380)="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", 0x1, 0x0, 0x0, {0x3}}, 0x0) (async) io_uring_enter(r1, 0x2b39, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001380)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d6000000a64d906334ba93c1fd05bb2037c0172f20008d463f81218ee2820fc304f975f9c2dffc1a8174ef8c2047fcce2f0cc912fb78528a5a1a1527bd4c1417e023be27241535b14a22444880b4a73cf00f3679f5040c5eca8ee430f96080c8bb1b0dd7a3e4f4a176ef86968842ecb6fdfc489b668c4727deee316214fb0c2f905564e696074e0d846f9d4d8200c4a3c7cc7f9dfc6dd61eab53ce47926cd327ed40eb10713dc2f30b0bcf658ae4a9603d6d98f6978a40851bc5e676ea771be5bfb543fe92022d7ca6af7a2fc26799da966f0b62f99a0d8c0a43"], &(0x7f0000000100)=0xfa) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r5}}, 0x2) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7f) syz_io_uring_setup(0x2a3e, &(0x7f0000001480)={0x0, 0xe605, 0x1, 0x0, 0x391, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ef000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000001780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001740)={&(0x7f0000001500)=@can, 0x80, &(0x7f0000001700)=[{&(0x7f0000001580)=""/68, 0x44}, {&(0x7f0000001600)=""/30, 0x1e}, {&(0x7f0000001640)=""/152, 0x98}], 0x3}, 0x0, 0x10101, 0x0, {0x1}}, 0x2) (async) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x19c, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 1261.592301][T11629] sch_tbf: burst 127 is lower than device veth421 mtu (1514) ! [ 1261.628098][T11642] sch_tbf: burst 127 is lower than device veth419 mtu (1514) ! 00:56:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x19d, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x24, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x19e, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1261.711518][T11648] sch_tbf: burst 127 is lower than device veth423 mtu (1514) ! [ 1261.731880][T11659] sch_tbf: burst 127 is lower than device veth421 mtu (1514) ! [ 1261.747907][T11665] sch_tbf: burst 127 is lower than device veth3 mtu (1514) ! [ 1261.839322][T11662] net_ratelimit: 18138 callbacks suppressed [ 1261.839335][T11662] dccp_time_wait: time wait bucket table overflow [ 1261.852095][T11662] dccp_time_wait: time wait bucket table overflow [ 1261.858866][T11662] dccp_time_wait: time wait bucket table overflow [ 1261.865696][T11662] dccp_time_wait: time wait bucket table overflow [ 1261.872353][T11662] dccp_time_wait: time wait bucket table overflow [ 1261.879100][T11679] dccp_time_wait: time wait bucket table overflow [ 1261.885862][T11679] dccp_time_wait: time wait bucket table overflow [ 1261.892566][T11679] dccp_time_wait: time wait bucket table overflow [ 1261.899206][T11662] dccp_time_wait: time wait bucket table overflow [ 1261.906729][T11662] dccp_time_wait: time wait bucket table overflow 00:56:30 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="88232b23fd35d3fea08f86703b8e64c509c7e317d059cd04531811f95dd17e6c295aa7cbb78e812040457396c5b0e07bdf2bf08d303c5e0d4f9366b0afcfe1c02bd3c6d11704dcb8f6dc6d783e54421977b7c1d004b295b081e6d5cf3b537e84f902a9fc2a87d3d49dcfcee74d8129532cb400561a1b40c5ba7c32adae1d7f48cdd6d620b80a1d6da8f086ce6a13d40ba4165c9a", 0x94, 0xc800, 0xf850efad35b00831}, 0x10000) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x19f, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x30, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x4}}]}, 0x30}}, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x30, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x4}}]}, 0x30}}, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:30 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0], 0x1) 00:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x30, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x4}}]}, 0x30}}, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a1, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x30, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x4}}]}, 0x30}}, 0x0) 00:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x30, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x4}}]}, 0x30}}, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) fcntl$dupfd(r3, 0x406, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x6c, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x40, 0x2, [@TCA_BPF_ACT={0x3c, 0x1, [@m_ct={0x38, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xe, 0x6, "008d3d8896d8aef83a18"}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a3, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x30, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x4}}]}, 0x30}}, 0x0) 00:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a4, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 3: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="cd", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="e2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) close(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f00000001c0)="c4c42c5fd49706283d0b57bbe9ba3306c74fa988447068c5eed9568e1cd83606f23d997ffd3bd51016f6e7d25436008c55e898c800b851de5abbba46e248f76a6c621f42bcec7d753e302421f033b4743261f4ac9f6034ff194007c84670234a96eb139d", 0x64, 0x2000, 0x1, {0x0, r4}}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0xdd, &(0x7f0000000380)=""/197, 0xc5, 0x1, 0x0, {0x0, r4}}, 0xc98) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x6, 0x4, 0x3, 0x0, 0x2, 0x800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x3, 0x3, 0x0, 0x89ec, 0x5942, 0x0, 0x0, 0x0, 0x0, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) fcntl$dupfd(r3, 0x406, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x6c, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x40, 0x2, [@TCA_BPF_ACT={0x3c, 0x1, [@m_ct={0x38, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xe, 0x6, "008d3d8896d8aef83a18"}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a5, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a6, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) 00:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x6, 0x4, 0x3, 0x0, 0x2, 0x800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x3, 0x3, 0x0, 0x89ec, 0x5942, 0x0, 0x0, 0x0, 0x0, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@dellinkprop={0x38, 0x6d, 0x508, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8088}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x36415}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40085) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x6c, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x40, 0x2, [@TCA_BPF_ACT={0x3c, 0x1, [@m_ct={0x38, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xe, 0x6, "008d3d8896d8aef83a18"}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) 00:56:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) (fail_nth: 1) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a8, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x6, 0x4, 0x3, 0x0, 0x2, 0x800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x3, 0x3, 0x0, 0x89ec, 0x5942, 0x0, 0x0, 0x0, 0x0, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@dellinkprop={0x38, 0x6d, 0x508, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8088}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x36415}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40085) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x6c, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x40, 0x2, [@TCA_BPF_ACT={0x3c, 0x1, [@m_ct={0x38, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xe, 0x6, "008d3d8896d8aef83a18"}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) 00:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) (fail_nth: 1) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1a9, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1aa, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:31 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1262.840470][T11801] FAULT_INJECTION: forcing a failure. [ 1262.840470][T11801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.853646][T11801] CPU: 1 PID: 11801 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00152-g620725263f42-dirty #0 [ 1262.864733][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1262.874794][T11801] Call Trace: [ 1262.878073][T11801] [ 1262.881003][T11801] dump_stack_lvl+0xd6/0x122 [ 1262.885611][T11801] dump_stack+0x11/0x12 [ 1262.889772][T11801] should_fail+0x242/0x250 [ 1262.894229][T11801] should_fail_usercopy+0x16/0x20 [ 1262.899246][T11801] _copy_from_user+0x1a/0xc0 [ 1262.903835][T11801] __sys_sendmsg+0x179/0x400 [ 1262.908444][T11801] ? kstrtouint_from_user+0xbd/0xf0 [ 1262.913637][T11801] __x64_sys_sendmsg+0x42/0x50 [ 1262.918404][T11801] do_syscall_64+0x2b/0x70 [ 1262.921429][T11820] FAULT_INJECTION: forcing a failure. [ 1262.921429][T11820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.922801][T11801] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1262.941746][T11801] RIP: 0033:0x7f2065ff1209 [ 1262.946154][T11801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1262.965827][T11801] RSP: 002b:00007f2065767168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1262.974229][T11801] RAX: ffffffffffffffda RBX: 00007f2066103f60 RCX: 00007f2065ff1209 [ 1262.982230][T11801] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1262.990257][T11801] RBP: 00007f20657671d0 R08: 0000000000000000 R09: 0000000000000000 [ 1262.998270][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.006257][T11801] R13: 00007ffc2c0695af R14: 00007f2065767300 R15: 0000000000022000 [ 1263.014314][T11801] [ 1263.017327][T11820] CPU: 0 PID: 11820 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-00152-g620725263f42-dirty #0 [ 1263.028404][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1263.038488][T11820] Call Trace: [ 1263.041765][T11820] [ 1263.044789][T11820] dump_stack_lvl+0xd6/0x122 [ 1263.049451][T11820] dump_stack+0x11/0x12 [ 1263.053601][T11820] should_fail+0x242/0x250 [ 1263.058061][T11820] should_fail_usercopy+0x16/0x20 [ 1263.063084][T11820] _copy_from_user+0x1a/0xc0 [ 1263.067718][T11820] __sys_sendmsg+0x179/0x400 [ 1263.072457][T11820] ? kstrtouint_from_user+0xbd/0xf0 [ 1263.077831][T11820] __x64_sys_sendmsg+0x42/0x50 [ 1263.082637][T11820] do_syscall_64+0x2b/0x70 [ 1263.087043][T11820] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1263.092935][T11820] RIP: 0033:0x7fb569a7a209 [ 1263.097373][T11820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1263.117004][T11820] RSP: 002b:00007fb5691ae168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.125478][T11820] RAX: ffffffffffffffda RBX: 00007fb569b8d100 RCX: 00007fb569a7a209 [ 1263.133539][T11820] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 00:56:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) (fail_nth: 2) 00:56:32 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) (fail_nth: 2) 00:56:32 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x6, 0x4, 0x3, 0x0, 0x2, 0x800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x3, 0x3, 0x0, 0x89ec, 0x5942, 0x0, 0x0, 0x0, 0x0, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@dellinkprop={0x38, 0x6d, 0x508, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8088}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x36415}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40085) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x6c, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x40, 0x2, [@TCA_BPF_ACT={0x3c, 0x1, [@m_ct={0x38, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0xe, 0x6, "008d3d8896d8aef83a18"}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) 00:56:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1ab, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:32 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:32 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1263.141499][T11820] RBP: 00007fb5691ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.149472][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.157494][T11820] R13: 00007ffee856305f R14: 00007fb5691ae300 R15: 0000000000022000 [ 1263.165468][T11820] 00:56:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1ac, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x6, 0x4, 0x3, 0x0, 0x2, 0x800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x3, 0x3, 0x0, 0x89ec, 0x5942, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@dellinkprop={0x38, 0x6d, 0x508, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8088}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x36415}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40085) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) [ 1263.257486][T11834] FAULT_INJECTION: forcing a failure. [ 1263.257486][T11834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.270671][T11834] CPU: 1 PID: 11834 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-00152-g620725263f42-dirty #0 [ 1263.281705][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1263.291770][T11834] Call Trace: [ 1263.295049][T11834] [ 1263.298024][T11834] dump_stack_lvl+0xd6/0x122 [ 1263.301476][T11841] FAULT_INJECTION: forcing a failure. [ 1263.301476][T11841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.302614][T11834] dump_stack+0x11/0x12 [ 1263.319881][T11834] should_fail+0x242/0x250 [ 1263.324372][T11834] should_fail_usercopy+0x16/0x20 [ 1263.329391][T11834] _copy_from_user+0x1a/0xc0 [ 1263.333969][T11834] iovec_from_user+0x187/0x2a0 [ 1263.338792][T11834] __import_iovec+0x49/0x290 [ 1263.343484][T11834] ? __rcu_read_unlock+0x4a/0x70 [ 1263.348412][T11834] import_iovec+0xb8/0xd0 [ 1263.352799][T11834] __sys_sendmsg+0x3c8/0x400 [ 1263.357451][T11834] __x64_sys_sendmsg+0x42/0x50 [ 1263.362218][T11834] do_syscall_64+0x2b/0x70 [ 1263.366624][T11834] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1263.372554][T11834] RIP: 0033:0x7fb569a7a209 [ 1263.377097][T11834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1263.396693][T11834] RSP: 002b:00007fb5691f0168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.405171][T11834] RAX: ffffffffffffffda RBX: 00007fb569b8cf60 RCX: 00007fb569a7a209 [ 1263.413128][T11834] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1263.421089][T11834] RBP: 00007fb5691f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.429105][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.437065][T11834] R13: 00007ffee856305f R14: 00007fb5691f0300 R15: 0000000000022000 [ 1263.445046][T11834] [ 1263.448069][T11841] CPU: 0 PID: 11841 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00152-g620725263f42-dirty #0 [ 1263.459100][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1263.469186][T11841] Call Trace: [ 1263.472469][T11841] [ 1263.475399][T11841] dump_stack_lvl+0xd6/0x122 [ 1263.480031][T11841] dump_stack+0x11/0x12 [ 1263.484190][T11841] should_fail+0x242/0x250 [ 1263.488610][T11841] should_fail_usercopy+0x16/0x20 [ 1263.494037][T11841] _copy_from_user+0x1a/0xc0 [ 1263.498714][T11841] iovec_from_user+0x187/0x2a0 [ 1263.503490][T11841] __import_iovec+0x49/0x290 00:56:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1ad, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1ae, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 1263.508099][T11841] ? __rcu_read_unlock+0x4a/0x70 [ 1263.512960][T11847] __nla_validate_parse: 48 callbacks suppressed [ 1263.512972][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1263.513032][T11841] import_iovec+0xb8/0xd0 [ 1263.513057][T11841] __sys_sendmsg+0x3c8/0x400 [ 1263.513089][T11841] __x64_sys_sendmsg+0x42/0x50 [ 1263.542461][T11841] do_syscall_64+0x2b/0x70 [ 1263.546893][T11841] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1263.552795][T11841] RIP: 0033:0x7f2065ff1209 00:56:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) (fail_nth: 3) 00:56:32 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) [ 1263.557252][T11841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1263.576917][T11841] RSP: 002b:00007f2065746168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.585338][T11841] RAX: ffffffffffffffda RBX: 00007f2066104030 RCX: 00007f2065ff1209 [ 1263.593325][T11841] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 00:56:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x60, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x60}}, 0x0) (fail_nth: 3) 00:56:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1af, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:32 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x6, 0x4, 0x3, 0x0, 0x2, 0x800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x3, 0x3, 0x0, 0x89ec, 0x5942, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@dellinkprop={0x38, 0x6d, 0x508, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8088}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x36415}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40085) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) [ 1263.601305][T11841] RBP: 00007f20657461d0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.609359][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.617402][T11841] R13: 00007ffc2c0695af R14: 00007f2065746300 R15: 0000000000022000 [ 1263.625383][T11841] [ 1263.632098][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:56:32 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:32 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x6, 0x4, 0x3, 0x0, 0x2, 0x800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x3, 0x3, 0x0, 0x89ec, 0x5942, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@dellinkprop={0x38, 0x6d, 0x508, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8088}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x36415}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40085) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) 00:56:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x24, 0x1e, 0x229, 0x0, 0x1b0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x9, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 00:56:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x34, 0x24, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x2}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) (fail_nth: 4) 00:56:32 executing program 5: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x2b39, 0x0, 0x0, 0x0, 0x0) 00:56:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x6, 0x4, 0x3, 0x0, 0x2, 0x800, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x3, 0x3, 0x0, 0x89ec, 0x5942, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@dellinkprop={0x38, 0x6d, 0x508, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8088}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x36415}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40085) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1,