Extracting prog: 7m52.178874686s Minimizing prog: 1h13m23.541152221s Simplifying prog options: 0s Extracting C: 1m1.258209367s Simplifying C: 10m59.656407163s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL-sendmsg$NL80211_CMD_RELOAD_REGDB-sendmsg$NL80211_CMD_SET_INTERFACE-sendmsg$kcm detailed listing: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 20, 23, 24, 30, 5, 40, 30, 28, 40, 16, 6, 21, 14, 6, 30, 23, 9, 11, 9, 13, 17, 21, 15, 4, 30, 30, 14, 30] detailed listing: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000000801020000000000000000010000071c000480080001400000000208000140000000b008000140000003ff050003003a0000000900010073797a300000000069db78fa83055038114344b758d3dd0e726228a2"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044859}, 0x48000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000700000000000000020000080c00078008001200000000000500010006000000050005000200000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000"], 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8404) executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05d4a300a2a12f82f353508d0104000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001800"/28], 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000000206010000000000000000000000000015000300686173683a69702c706f72742c6e65740000000005000400000000000900020073797a3100000000140000000000000000000001080006400000013f05000500020000000500010006000000"], 0x64}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0x700}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000440), 0x10, 0x0, r2}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000840)=@newsa={0x190, 0x10, 0x10, 0x70bd28, 0x25dfdbff, {{@in=@remote, @in=@loopback, 0x4e23, 0xfffd, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffc, 0x0, 0x3, 0x800000000000001, 0x10000000002c8, 0x6, 0x3fffffffffffc}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x8}, 0x0, 0x3503, 0xa, 0x1, 0x0, 0x3}, [@sec_ctx={0x55, 0x8, {0x51, 0x8, 0x0, 0xf2, 0x49, "8a71904bc5cb3189d78ce117ee27cf6066ffcbe782d54469f6ffd77840899eae25f398f9b2af0fbda46f9e1f087a0320b09c08b55ae228ec074f491c891b730df8745bded45124d13c"}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000001080)="f6f6e9a1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc190885422e4d22c8c4c8622ed05991376a096ee089adbde87b8a86001e649", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0xaba1a000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) executing program 0: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) r7 = socket(0x1e, 0x4, 0x0) connect$can_bcm(r7, &(0x7f0000000080)={0x1e}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x100, 0x4, 0x24}, 0x50) bind$unix(r1, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000040), 0x0, 0x4000000) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)=ANY=[], 0xc) close(0x3) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x178, 0x0, 0x148, 0x0, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x11}, 0x0, 0x118, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_macvtap\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}, {0x1}}}, @common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x4, 0x6, 0x3, 0x0, 0x2], 0x3, 0x4}, {0x1, [0x4, 0x2, 0x4, 0x2, 0x3, 0x2], 0x4}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x2, 0x1}, {0x4, 0x4, 0x4}, 0x80003, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELOBJ={0x174, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x2f, 0x8, "71b8564034872ddfa417e1e0002f2103f034b25d292013af439796bb0bbe94eb0a9d1e32e64378dcd5860b"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJ_USERDATA={0xe4, 0x8, "245c3f5d72c0f8545d10333f07c90be8e9653644cb1e17c04fd385456e8ecee9e1d22127a3e15feb5631840b3d30d6816bda62355fde63ee3a7bac9499650ec9880d14aa1316f3582da618243d97b3de7b399dc0cba3b13424987b1076fb9e71f9ec6514c512de441b64c11b339a16c21917faddff9bee16101c7aaef83d427fe9d40bf93709ecddb551083ef5750039a0bd7dc7f9d4936d9b633b6cb3650eccb954212784c95d7b9f0c38e3ab502fe0d4e8dfd440b1101f85ba40a2f78d2bff13d8c6d5f6f1b061d0f26fd911d9a31c0b4fa9e7e51ddc63b96d0473a6df225d"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1b0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) r8 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xe0000012}) socket(0x3, 0x0, 0x4) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0500dca7f901032188609e51c2d7392ae136ca857e1f1f1bd2bf5f33101b801f4e525f131ad798a28565475771b71059c077b16b464ad6850c4f28a26f53145058581c45c6ff2cb1c4011b5e391898dd52763d6737c806e5712530b9d4cf48aaedba60c83851157dbf0eae9ddc1b0959769b0336328e421fb739d3656281c3f4c634d62b15f143e819d5"], 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 0: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0591ae0523093d65fb2501000000080001007208435b580650800169b645c7e4", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000000800010002000000641a462c0fa4c7f6c50a6fbc1af3b56818342e1b454fc0990fc8055c8bfc1119c6e621b87de45ae879007cf664f58b4ddd1910d7f71c9f22757a29b02e9f8495bc628e73cddb366336b70df5162ceadd629275162c0832597f66b97ffd7e5853ec9b849848b86be9ec50785024005915f3ccaf63711403318acec84e450de22930e100969f8ad12b6119f6d6"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)=""/4095, 0xfff}, {&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/74, 0x4a}], 0x3}}], 0x1, 0x120, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f00000003c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x3, 0x800, 0x7}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) (async) r4 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001040)={0x34, r3, 0x1, 0x70bd26, 0x4, {0x25}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e", 0x6}], 0x1}, 0x20000001) (async) sendmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e", 0x6}], 0x1}, 0x20000001) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x40008042) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0xff53, 0x2, ',\b'}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x6}, 0x8) socket$inet6(0xa, 0x3, 0x4) (async) r9 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x404}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000ac0)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001200)=[{&(0x7f0000000500)={0x27, 0x0, 0x1, 0xc, 0xb, 0x4, "08cd878a27639b4f6e869d8d89ac19dd09e908ab2a0db191a6f56c10ae3a522a9c3f0ffd5b568297be99344adc8d3c7c08affb3f46ab2936d50d523c5f9956", 0x31}, 0x60, &(0x7f0000000a40)=[{&(0x7f00000006c0)="c7459cfad5d1eb6ee996c74ac8e887acb090233c3cb5d47b9f0a8d24b7305e952c0a87df56063ea01ba515760bb0899028e2ccff5116b66c9a7498e78101c168394bedad29f42b7bafad8ed6aeb00535e394f37e514db64e56be4caf3bbefdf0169c0e10fcd5b81d6c81c9a268fb", 0x6e}, {&(0x7f0000000740)="7672e972c211224cfdfbfc497186a007b3c945854ffe1790b30c4d552cb195d285ad806ef5c33db4d41365862d5ec05b2e93309fba8a7eea9bfc790f5026fa94ef64288c8ef4b14b733ff8392d2932dbfa37b29f1a34b8c62710736428272827775ef866f8310897e56822bb9f82fac831b6e5f3d946b961a6", 0x79}, {&(0x7f00000007c0)="29a3af61ea2c76e22f8f2541adc9c4ede97ea969e99e1a2af3a92060585ddb27c81ff33be70b486d54d1c3a33e1322deeff3ff3016b8fbfa26c156d2f162a9c6ea5d23f3fd613dc145afaf8377c14535b06d4a2cbec65b0354e0bd2203a54d4e842e7f1416271108721a77382361209a3d5c583046b94093e95a584ab18e876799cfe11117bd1b33fac6b63b99ac39a4c04f1721173487a886c279899d77f338ab1b6f907f12f727b9e9bc6a7525b98e68ae5fdcaef7b474f2c5d2ebbd27195f80f97beccd191fa1559afa16ecf520488e95d46479a5a40abb04bf488fead4227b0662ed8185260b4f5e08aeaa7ff9", 0xef}, {&(0x7f00000008c0)="e44fd7e3b9b821baa16245b885aa2c118925cb77fb6bf62edca653fa6455e92ea0c696a571de1bfdf72e09ca4b9c6fb19654827748af33c031aa88bbf92a964fbc80c49324", 0x45}, {&(0x7f0000001b00)="da6ecd4bc5b485e55f10de510a259666d1532d48e5418484926ecf8a9db9c9f5abeec923eb7b0bbec0878b581c1827caadf4dee3e0b606f3f5c5b011fde2f4e0040eff6d290922ea0de85483f5f56864f962d7d545b7c52efcec98f61422719be15c510fb8ea2d5177f9ee17869d5ff25dee2185f8f4f91454bb7d2c3bec5235996af94bd36a939e91f3cf2c48012b401c90386c62d75c711018fadd15f45972067cdf8e5d1b0da50f4bd66218671cde51bc438b3346a91b0e16b7c70a760966efbcbaf8d525eace1769fd5751ae7b5e6e7576aa3fb309ed6db7b8fc17b5f5741977a3cd09b47be3c28f2bbf3100d2cc486a6d020478c6a28d918c351663e3eb8758bbfc202152be7634debdfa1c587fd5bfd6f00664377fae91c6c444e46b50c7775746370ee434e57c9a456dcd49ef3659b88e11d4fab527a926a6820fc1482b0551b90ba9d6f92edcd0f97e51b4b7844221224b19fc221a24a1507e1cb7be36eac5819c2f15e921f94dd6b85ad2201f591e96456857787d36bf491bda7e1c1461936fd47d2279296ae38e34ae07ca6dbccc1ae611c7eccfd8ad0fc0325b838acd1ebfd4fba73e8228d5161010bb10aea02919331e6b25c6267f5e0a9e2a9567ee3436c4df6119ac8d28afeec360c6d164e174863ed34aabc661b1cc44744e492b9d9009c0ad85d93ad0d79d6c50ef8a056cc315974950483c35cfc9ed049115d75542247f7f29900e16b24065c1ec9931d8b4345967360d4e1798761bd7f9e21b785c9a3376c1a47a08c22f3b1347f71a72bc9c213c84fa7c220c2488ca411d4023042a80869009aa206e55b5d0f2f3b4c14ae4a1f89379f370f51ff58f8e25528ee6d7d0fe5b32f975ac75158288126432aac220b3a758f183ea8f82507e0fe87c0912512717ff098edc6143a52c11f3447425da71183fd97be070288f0cd86d2af62308fbd4d5245ca305289755e562a364779a2aa32a1b1fea3882ac9c6cffafe103606fe21eb43d06fc6a91888388742d2bbef4b5d429b9649b41f8f930cab0b5de1adc653e7bf3a9b3f88491de8198ff676631bd9dd317e6ccf6df576c6a94cadf233c589b1f9e4d37e5cb554e58638988ce9b8e3f47d5202949ccb0a85429adda1f287ea00aa66947f179456f58c6b70fa420e3785d76207825af2cbf9ae87b701705ff14253b530cf65512ab8b43277cf123132195df37d139a1584bafb0e16c365f6fc758b06b117775654efc42944b0f50acedf9beba90e1654a0069aa6ab8a6559924f237f1b7d97186d7c8768dde0c064fc125b011ec238bd13262ad4f1dfbd4a0f410d2fa3124df134ffa90750f1f2a16f87674dabfbde6ce3faae33f938c844c9c78f2d7450aa3cbf58b95f54a5bd9ed19defe58e07a87a6e917f848aa4e381d20b7b7ee13a30c65b5fce496c7a607ac3eeb8bb3dc0f7b0f5efd416dfb0fa4b4e573ea28f787068ef79583c7e84a48037f1b7da9ec617b3244838e2768eae7471b68f6c4e3890f9d158ac9b0ebae69d34501bc73adbb40c3710ce8cf78bc29fa1d4935148dc8153a312c5dfd13ba684d3b49f5044011886aea01cd67a7fc1ab3213848209d93263b892363e53ad36d6dbddff02787e9715780c658ddc8c1d0f526f6bcedf5a4295c657225468bf52b501546ff5b79821a8ec7fbcca10e649d10fae19405c7bd157f85f4ad91f1158f4e936505f2f0c1b30565dde067460d7b5d0f6d22eaef4245f8327255a5604734dc3e206382599589b3b47295a8467172d9f7a8bb609b86a798992e8b1d221c6677f69b982816a2afe5d2e0f2079fc37adcd09b8e91dc736461720161b80726b2cfd0055d22aba423738da7768728582d67b8bc2179137deaffbbb8b0bae55da0bc71d5cc9205dc824067c53fa8cbc713a84f39ab6f6b324c1e450a0c5036a97ac6ce3530010b6c2081a4c5f63c215013036dd9962dea0c67d6c34d8a5636438a59fbf758726a6943cf8fb3d03e0462520d7863493818012ee1b0467e6882e9a448529d163413a5d0e8f74dee965e91f44075519a0c51cf94c6190a2349923277bfa6d919653f6815602e36d51ac7508456a644d0176a65270101a8722b7697ba6856ce28b3cb558c4562dcdc0e4cb5e158cf75111b5bca1c607b2a0073b44dc134ffa7b9a8832758dafa467ea919f7bc5b88c996ca4df6b6fedf62560127c9d9725244754e4ec241a40c5541f5458b734f48c2dca22d4e6f19fe239cc1e201464646b71502f49b24d316b3005a081d7ac07429c3e0361141383c4c5c064ed2745293daec887ee742ab1c8777085fda5d6039b85d278911fa1716288cdf866a54921fea83828e663fab595274f3401d8ba6c2f2bb3cfb7a0658595863bbec6e36980f34d6f6f458c4a0ee9916f725abe3c29288b1a3fd28df0215544b0150c6df2f896b56db1dd93a7fc7e672ca45ade598f7effab6f865a39f84921b10ed34bd4135976b5700dcbca7c85a863aed478ce05e12bb1e57f5b2f2b8882368037805f79fced18b9d7659e35b48cc0ed7515ebb1693ad806599a7ddcea8d86fbea8454fc18dbc868b00fb1bdcbfca9c0fa226e9e0742e659094bb741661fba13d7967b16fab443538b601238b93cbe33255da3dee0217b1899b33bd02a2d123766e95705c0c51da82e5f614182f54fcc9c8ae44ed226cc8fbe348b4ad7e3f7e2e12aa2d6597db09cbad8588be8dafb538b4d20c4f416497007865fa64090c5a50e0dafd7b8e84c0187eba6e1e99002e83001686d1bba3412940770aaafae94ca09f72b2f7c28abc101da984c70c916c5263ca4c09209841e784b0fdcc523da80ed007e18f4f61641f3c35335254d02073404236a57ed084582fbd6cee47c308239290df7d7547cfc328dea93fa61e81f9f8b87b4839da235a323c72ee7e915e414e1104952ff9ece97bfad513a3c29fc043ffec9491a526ecb202fdc44eeb4134c90b7db70928fabb1dd91e50f36f48571fd1362780c6a00054177d4e8c078030f489d9e5a8aa9bd8e1762e04804beb1b32ca1d3af2d69fd138e4d6776e317bc5a33a00896370ba8b3d87540aee74840aa261f2f0413a09573bc684ab5b4e92b67efa19c365445832244c7cae65641478caa14e263f6fbbd25ab7f6ba7ba04f00f752aa61be4322286cec949122024927feffab6b55ea13ce0a34bfad54ec18d7a6f6ea378da327a726300a4f41457dc69a76c9d34a8c5dde26958e8cb510bc8fa9d8526a7b75c4dd1dcfab05053ee8b4075422672f1944f7a32af3fe8aa76f48d82842e79e14f7fd94b104596049d70b26e708f48fe5f1528d1a7e682fb3b0d47e85358400e9a503a85aca574b89d988c0aa6a9073277fef6d0f91a6745b73c05c167105f90b6317593773c51a9bded28eaf9f6d9229103580bf44d6dcf00a9460828baaf679629fcc54c196410b401eec8d1b75b8c9014e47b19db60690b2fd7254d19d347772c0595f5218773e81e791bce91bdb16cef465e24e1e7f89db830d3bfd5b7819f1a1c96fcf260f776a17ae3c40cccd873f0571209913d1a1315cd12b6543465eb6c05392f34d5d0924ccaab2452b9b24a4a00c2194145b9c955ea097f158580ba5db9894b4288de394bca62faa0e0ebd9f0555277aa6ef51df8726ba4ce4f1eb2961a028f2ff90f7fad3132431627fdffb7cae917e56960958a71208775855f3052e87c06cd3384f27f016b42ab4548542d4c01549121a53ad6b18a028dfd742eba7ce174f37c5f6546b79d85faadf1c669653cc26f25679dc2de39344ce667f128b2f56d2e7987cb04d934d171d4f1d6515a1ca180f8283400a2a6a44249db2851f28650290264ee7d1cfa97c5164d578c6d7d7adde1ff86f75716aa192c576efaf6a93e7cf6a6ba40e4d2a76f03217ea29859fe63e578a3d0e52afc5a43c88127d8dc62b888755abd3bdc41ca77d50b6f187d73e4f9befc0a3c7c376aa70f457c8ed88cffa796f1460ffefbd31c713deff938f4e2fc9dce48b0f5090685231e60bf1eab99ca93879dd87d125a2cf04b9339660d547eba8cfa0c9fd5cbf06a78722acb9e1bf9b14d0f21ddcdbc2e4b3d22bc3164c21e3f5ded0c9691ea62a18625fa46c1b4e500308b5c03b0757f81b398fd2c116dadf353e2d93bbbffebed71afa475826873c2d850314ec87d4b457d19fa5aebe019b48502fd3c9d11706f5200e706c2164995b0b00b594fab84b1da2f32eba0b77ec990f44e840ae755dc7ecd2fe4b9cc879fdcafe2510d733bbd5ac6f6eaf6ac4c074ff0591d9d56d6a95b7b77e4735274a98a92a9b6d247d6d3ed7592f2a7c311839531e278e61501fef101051d9efb68e1cd7515fb1de51c13ee9bdab3ca74f8354f3219bfc4b364bb8b4a76e63b55da633f393c7501c5eef9136572c8bfd8a3dda954b09ed146c0185c50dc68aad3250107579530f29f7e3aa47934341cd3c5c317271890f3433ce8a8e6abf783fd90577b2840073772d63c91db8871e130aa02f8b2e6f0d1ff942217ddab7c4c1a7d2da085252c51e3fdeba53c88cc5afbc9094d5980b8c45ddc8ba8659601181f651c33967e3fd7d269d49cae123ba7f3cb746c624a1dd74d1fa37c5700b7ef2d16d4005881c47ea8e92c45d409e243df342552bae9269df3db3cd61dbc54196034070c29352a8f6258acfaa59819756b7ab8aa2d394df91c230f35dffbe32bba380000b23c7a3e0c52697b6e8e7ffb80faffe9248bc0043a4c8b0ed5450930b11ba2763414c11ed7d4d36e23a4754a10de8e44145428df459e6020fc31d581384e0e9ae520f259492bcb8764ce405d9482211b33d3cc9b999ec3a73341c133b47ac709171604741fb46ac8922fa0ea708b6ea03c1d591dcc95e4ad50fa241bbbc431a0d120094b0eefefc55143a8d0bad50a17bd24fae8424e665dc00816d854ad06087f274e64e2a909ae64a70ad3365ec2f9303d002a3a73effa96e4e3e09cf3fbffb875fa9356ced34c697322158d206ac6e9944db45a965acbea598c4ab7921c758409b193e9495856d068a8343324b91a0955c24c0fd1babde1bc6a3fbf013b68b57678f97dde0d3e68cbacaa9a73d8f44f36476193e8d1269b43383c7310d79fcb7589434fe7a741f5c03bb57cb86ba2df41a227e571304ed60817c7ceca5920eddb3670a6298bd5b3fee9a892cbe3407d5e17076b381ccc8c826d4bc6865f96312ee1b1b7ad7d5f81f70c362be9c9f912d6eac7d8cb3fb53f885b06c4e3ca97dcb12f2f0cb5b95a1019a9fccf896d86516001400b174c4091c9ee7c05cbdc51bcee178a668cf2ef920414fa9e27c43d11002a81a1cb41f04a6c2af8738dd9eb49476482f07715cb8318d6149a9ffcaee6b947fa2778e6b0e7e5cf3c82aac0ffec05f631a2363b8754b6b47813c0ef66064cce0f7064f1cdecd170b7a94f585f98393da4a5d46e58d01d545e0b336d9db2c35dc619215a643f10aac9b17e84218603a4f04ab03eb5207d871770a8738288e2138d2e7ccdb50e59e9abe983c484d809d11470927bd5e6ff7d83427774765a3bc452a3a55f5bd1a71aa3d0a2cc957ce79c2369c4a38b5afc7dfe46b66f8411f1331bfe32bc52a48b27cd51de6ffe0de3e5c29cbc296359b4d26bd55327eefc058064cd6cd6b59bf59ad23ace1442b743c94a7bd6aeb11ee227830e26d710257989b1192a3426315347d9656520eb4325843a460c93d41ffb569b73d22e060892652118e52466b5a72481d8cc40cddeeff446ea174e47f480c67a119cc27e24e6ee487018940b9f6b9f192", 0x1000}, {&(0x7f0000000980)="e9d44a1b0a87a035664f7b4a7167c48988ca863782895def53dc40de14207232613bd66a494ec7dc3e7612627fa2c356dc5d3c80f86a58c191eacc84ea98d1e078c3a85fcc686c39e1da69e2cd0a2adcdeaaa55e0e62b505d92413f2c847de029fcd3254220b0d3b8177e41b527a9970bcbb459201c4aeb4ece9338f10f1e563b09ab3472f3a574b222d0409485bd714f4fb00bdb3", 0x95}], 0x6, &(0x7f0000000580)={0x20, 0x0, 0xff, "6369e49429aa475ae3da"}, 0x20, 0x40}, {&(0x7f0000000b00)={0x27, r11, 0xffffffffffffffff, 0x5, 0x50, 0x5, "c45fdee7f6c4c6144c57308261fa4662d30f956ea6eb7d6437bea6a5db28fe02834e05791eff12b63ff3e61520e13d8a8814eb619df5bb78e2d8bad55b9a6a", 0x30}, 0x60, &(0x7f00000010c0)=[{&(0x7f0000000b80)="0dfc324dc0f98e314444a39f661c844b07f9e6e477c38f23607284f0bc54484307af69f3a5ff21ba2fd5a993e737b1512c8b2480323bbdb2d1f70b493e04af00bcc55aaa99982a0df2d1d3862efc15a730c0c8c2a285a42494920c48c7dafa2e20ee8f4cf28aaa4ce418e7529ebed951431bf297ed06ab38b893cf1b4e93613fe27a16a74a468e1df09722329741ae92e41450aeb42232d6c2797f08a192ee91b883ed6c76ea72d6600579c8edecd87cb3a2b31eeb23f9909d5f73aabd60ce766b239660b032d0e13f8f60d8a6ef", 0xce}, {&(0x7f0000000c80)="9677dcb9251d49a1fe2f21c500fce8a49092b63fa62f660345522344913a5170922a5b174c21c94f9d3a291a57bc391e67020bf45a539410851f48582d9ddcc4c6eec59f5d8e77068f60ad27", 0x4c}, {&(0x7f0000000d40)="1aab7ce0d45233e15894d08d491a166d0a5dacfa5bc928374412877668f4fd26d1e0fd474d28160927982fa93eb8a4de526cee8dd0c0e81d99098c3726d2c23732457143e549d04d00ce5d2bcd798868e2ac811582c40e868d00cc0c149d8212bbd3479381ae2e0276f68c0354d2b24276c10f8bfb67702db30eaf0a586d80d4ff79211e31ae53b24aaa2746dbd97f5c7090688582576ad16b0f7c7645a7529e300c7fd4be564e35c66ad3424958d69a6c9f88afffd60a29c2d435cc346383f4976cceab2d139885c7a651b56b18ff9de8fa5f2f647d5cd21692ff7ad078b07e22ca9c846f8a321b7ccfd4b8a9d5cf64", 0xf0}, {&(0x7f0000000e40)="65d43e1ed60a3ed19cbee7743a97bc72e63df0687e19585cefc2f55329ac6ff3c0e783bc278757b58bbc1ec4aa54420ffe26e7eda96980cf394760ff4765d690fe031383c0a2c0c23d9b108b2a0c4e8296be9188abc01eadb1ccb8de0afe0d40a063d4d81d3f8b78aa0fe561db06a186d3599eb6a57394ac04c4a86d9e614e358776fcc4d54dbd85a9f3ebf5e5dab86fa16f0fb81ee1d64185ccd1ec88759267b3d6b59cc028341cfda7e05247495d69e539250b88bc8e090d13a51afc5b91daf640e2ecafe5f83bb581d8b8ae415c391c47954ee7e2", 0xd6}, {&(0x7f0000000f40)="6e3293a4b99868b650bda54ec56dd5b7b8b16a23e27934b19ff7a7b8e963b4c8c96eb2da987987d6a3d68c3d10d72268c82ff517bd49fdb32a9a2ce37667cc48a34d4722629d0d5d80c034c0ca55a575dda99e5aa3c6b38fdf2f113a3ba08a3881c25eb68d0356ffc666d691cb5f12694955d803fbfc9cd1e98c5cc8030d39", 0x7f}, {&(0x7f0000002b00)="412b18a884791958331e778c80318005a9f9b57bed14f297b530b11018c2c526536c39b29be19c81d5fbb7fb0a14f9c1ce3f7e5e9682b08c05ec6e7d67c36197ca4752c9454062582d52276d0e67578f091fcee7d54cfca6029d8f8660ea772f4835f3cb72eba947ab9888889b1daa96b7d5d0a3245ca46fe563a571fb8f87341b2f7050e73584b7c202f691f249ecee07921edbb69a65a470f0f8ecb3b191370ddbb44affb70809c813c765d9f96f1b0ce3e7184e452cf10b52a8e3196cc19fc961b746f9fd8a35c4eeb7ab3401ac2641df8e30493a701945fb661b0a118ddd47875403f5180d3c0228cc3a1a5ab0314081812a88c589f8825360a017bb3e19baf563d261700f08626607d5aaf84c8371d8e78a8ec16a82d64d76d47c4326d32f5669a93bd597aebe3d88679bd4e189d1a8ae48b0c1c88a2a3f7b87355275f80933150f5c9a96334da8ad30bb03d3edc2d796d46004d1ea03ed70d51eda20369a072d0e873820d5c34128083170cfd90b4fd6799ecb8960ed1f2c348d5fc518351824052b9a58694432212b1aef7b7c19f6e7e0f256453cd6a4d93717be1bd8777d24858f8d4f0164992415ea5a91e47e56381d2f39dc139285a1d172ed9e8a186774c20e8e2819a1f04be3989b45794e0abdf1624092d81ca6d6a92aa2343fcbfb78f6e699f816680a693cd3c2c2f801290188b4950fb4f4eb8b8002e3c8630cd9fa09002b9c1536922a8309e0ea3431773f61858b0b3cebd8ced41d4d4594a5d376f4e80f819f42a1a21c4a5aedc42dd31c1d381b05a9e9f9dd12a01c9740405fab054877289f1bf69e8ef07fa84dfc042fb1e04626f2fc51b6e795c93a1418da7f1a4e795c04087b7af1069fe0c9304f821a227ad0d606755140caf69723454402715b3a4c5f5ca51b374986219457b476bb88db275e55b3b088ee7c8645c46cbf2d2054ae738ffe12e79e6f4d24f84564fad28c33519ef42085ff628ada197221aa09d98088ac1a0d3dee1d845560e80b981eb2fe0d7d4762467320cf61a8be5ba526e7f855db1238c8f317913bd1e9d72f904b3d680660f71ced64f9cfd3b574003fbc9fd8c7bc51657a72ffd446f4f1494f2d1da867df7643f0ca7fb495e8be385e0fc0cf2aa38403d5ca7487733403c02f5828c79ba9bcad2dd737344c82d61135455707d1b534f86d514ed7c1c18a34cad170aaf27c97b6492e9862425fd69122f04e8959042660dfe24dabed00650ddcb9fb33527f4ff6342d72102099f9bef0ba288e148edcec15ac8068cbf48db23324c4779ed82c508abe7f2ac76cc3d2551e0f740603e36b8cc26a481d5a411f31f13fb260ffd331c1bfa6e72c2553eb33f361f792c6fc51f5cf3b9629f0ecc076933a6da8d94f9b9cb435b96e84ee3633771b43409e727c35ee9de957909e4dfb6b23cefab44a50870eef08b9f66f66bce04da2022b76e1777e4978260cd3a4391cd0315d698dc35318fc173cbab600d87747be99b2c20fdf3644cdbf53d92079f1e8dd76014daea609093f82ec2bea59286f90d204e6906ff0cf385e4d0a8aa745fa4cf25d3637dc35b45ab1bccb8b5f67e6a63c1c00a1973462c9da81c15c1c2d2c3a6228d844ad2477f27e64f54d1c5d583ed4f59c995021f2a0e33cb731d9f5631188f1a17c09acecc0c877fad52a5cc3e06e3d661cd0330c7b2ff71ea4197c110cc5bcea7934c6d782239c758f988ef6472ddbf0dad0a189d637af40756503ca676ce407c7488cf281da2c6247fac3f29612c3109921be488d6ee44076115ad571f6f02760f9bc34615616bebea2aadfb3cc0c9be9bfd533e84e1df142f2f031eb9622b07543025963ea48b7dc7dbaa57c4c6ba67ce1d76e5dff4853d5b2d684c505fbf9352fae97ed8b1af800077146c3efaeca40c53745db295a1bbb36979175f1c921d3f569bfa3eed34e4a47461dc20943c2b1a9db0afb4fa3051ab97d0f4e86b360f06b16e9f8b298ba1f6bddfd57dee62cad0e22aceb27822424a54525f3e890a2ca7188553e22b94eec7731fd34c7bcea0ecd5784ae8152abc4a69a06b55c05f3af4b68954fdb0688409467056b10ec1dc95c8271c58288a9514894c148c77dd2250743b1a970316d30308e91def649d11d73c8f5bd7668de966bbf3a906e3f149b57a1e910f932b7959521cfdc75da5bb323630551bc9736f0b0e15c3fb2a03e5da866bd5f0da109243654e7c4b29273a5447f988353d6082d6fb7284d559b0643301791dce2ed7e874cce19c46378782f24cd98ef7e2a68f46c2b3f41773aff514eb540fed299c0d79b833a93a067aa98523ee2e6afc277886617777b2b960715c9a6f247b605a3dd91003ca80148c23f26b0e4a84c8cb8331153ba73592b95d2b717612fd7526c7e4c15d5f7f7ce2012ba41c1b48b2d44f532717eef91fef3c64482b2356a4cde0b2c8d4143d15da68be4ae326fd09c62a56ec1a16793e830cbeed375f02977d5c6afa1d3963d63162246f9e495e52762472693a01ad097c6daca6088bd34703e09f22e9fa9cdd45be4ce641c180717d6d011a62d95985f539079fae628ed3226cf7fa6298a1ba37b0fff313cf40e4d176f2700bc54a8ba5abc31360073afb61e03f0624e3b116634280278a4ffc1226490e122400fb48bd872eb592fee063de90a9f4bde0c4e1323bf26829e8e1cc3dbb3c7cd6ed0b550dcee9baba1cd2e679ef5420c93c3e6d213e8ed3803f28f09db56b316c642a4fa7ef2eebe9e70c3448cc0a45817aa22236b5b0afcf38b89f20ea216de8ac6c018a1167c79e5af87da778b3b4f33873354af9da24e7d01d9706797883cdbc7f6324d12a1cda6e4078bbcce836b187f4dbf963eed9abe9c734e9c7b0bd494bb27e02e88ab9c38074e3414da7923c868d6bba693324e0e0a10df35e5a3f8e4fcaec184a64d64b3f81f90586b3816113d81b629b012ebbf69b197836f6440eff007edc88353b1dbac257c7e48feb9deb29d79d7ce8526f476dc8e4c89c22bf2bd7a26028cc9ec889d3279b7f9b1b0feb5e9103efcd6f1aaec853c2e99ebfc8b91ac8c70cb25e3e1ab3025e71108af91216329f6216d342ff5a336940ead6b59e95fed1643ff7f14e6e00e902824cdda29ba1c29a3bf86ad1c9a2b39f8ece4998ee42175ba114afbc52449caaa2650712b2e6bb1f4545e609471fe62dea3b2cb5f1e3b6a7944959633077c4df898c5e5dc10b87174c38576f271c0becd223ddf71abe2924e564fca96eee0cce990e1cb8b8948f2e8ca6c50c3349329464bf7135a67ca81ea16e4847957eeeb6172e43cb559554c69547fd384948136c62cda7ea526b181178487dce8e0875e321037d72d541e100f7c3746c1d488c3a5db9fd3af4a6354a12e0de428e61a973eb861d4c092d50bd1f0e60590b5084ac9a0df4697143da0b8f6bc1a981eac0cad3f1486a635279c6ffd61d8f0f948950f12c4033adbbee528586da7deabc23a8570fba66b4f941519bca47fd608459f724a64dc8fb4938e15fcee75b35a8336d844cbf0e7a107e09b3cafd9178900fd91779521267b0b594ca0f52b8efc10f3a5ea3776b232312457b14887253de3d2010e5e0789d68eab5f3361f63a37fe81632539e70195163e9c4b49da5388fc83e2c71ba88ca42b5e6f62af1cd79eac1e64957f7f46ae1667243993e65de9be85739d4eab33e8a768ee37fb64db0f5050b932455acb64bcef6eb242234f367d026a07a4f2fe0d82a6bbacb53f95f5e8623dc8a407aa6af0f786f03d18f4081b003a379c5e8382177c5935a3de24200d7382e0b11cc74d3dedb3a3b525cb30a11b70ee2e058d93feaaef20d90efe6c789093c9f077a1b4b38c6a4e4ce4846df74bfcb163b821925221df054541b14fc03e51234919c6a0f38f6406a7dafbf0881c22d4cf5d9d7412d3057f1e5a0a3c7112054109b6844f722cc680cfebcfc5901fa1104420d69f487423d6c62e6834ce0bf7cee988c1a600316ae6e17e906571f76e47bec8cc230ad14fe7460fff9d53a7a9323846d6f75520b2cec2448dd6008bc11761de9d811890acb9cfc7eeda37b71e38822abceb591b2b74adeed69ccd1e72f612b605aef60a46bd7cd9122f0366934bd2307c46006a7027fc7874281e2eae34dcfe6f74ecdb0d6b74b670e3f37c721f7352b7d9cf80d0d9092872a557d4a05c5e564278ce55723a7f9e06528ed42ca7c55b5aaba30e2727679ae287301d6c329da0c1050854ba783375ca9e0535045e86234bf79d2311c50ad5f6b9998ade3069e02e0340ab8521213ff8a7fc365c375b7593c51082d167580f5452d18024ca44449242359a843428ae9692ff168f9cb7af706ab56231c8569c36add340565bab793d5434162e595c95d9149c493b3a38a56ad404a60efec15d98009ae51e3e545fc2e150a2c0a8f950409ecaa575f98e1311cea57041f441f504d1ac39c57c400c014a97b94f8d6ae825d41d3143abde144c1cec93559098d0610fb2e52eaef35ed4a8a46fcd1f43d417204683c42eb322ad85dc1014a151d29f2f69671ac0cba63a5e41bdb8cb3de537c3f51007e5b62abbff683c08b45ecfd58455f8dbd199c369dd525ebadc66fc8fcbea6ee6103a470ab2fc8f44f791287ee69e406da0bc09a66273f658b5a32ef6042d1b6a904c302d6cf1f34e3b47ec709ac36c248b3ce8099170ffa3aa75577ccce3654a1441e5f845cfa0e9d118ac1c8edefcc7f355d942c28b9467760907ebf7ec24649f75711930e3991cd53357856131be1e0a97d6197ca70a262d59cb9a0912a02628f4d8af340e17239093c916d1bd6bb6ba1964b25a43c9470723aa29d3dca308af0401b2027c01a0300bfb4d96cb8c790173ab3756ed3b7a9c9f986db5b65c1866f4ca552ac8563d8f64d1ab17ab089b250d51a4c61589c9e46940acd6e687a09deb8792937a6c3266ba148105e16807199cbcd9b20aaffa858e70ffd8eae844ae0116096948c386b655da24aefa98a2c20ea9bcf68d0afab9ae010b7163115fe0f373e375e344cf62dd16d44ed9cd78c9e68fa9fbc2632eced94e3ffe6ef013eae69794ac9f98270a4458deadea4f98e7b503ea01998a181c46e34b21c4e25a4e16a0d0dfe59d59724c00c18581cb54ce7fa47559db69bb3e142cff82988df57a802b9c2afe78717e3cad1e6c8a366a6a6c861be4ce934b4b3f2a5b15e74d086e698ace68bc74929da35957fd1432ffb3284156e618ab5afcc5e410eae006c6b2a7de7f3cfcfc3a3bfa3898079ad49a6cc6b6aca6cd89fe37e0a46f75bd210129381e1f4a36577d0bda6e11580fac03e0a9ecd2294dc9f99d4edfe89f362413e52de8d8c645603f9355f07fb1be1997380cd6bfadd915e3ca8b6cfb6b32bec656e5bc2f9907a2ac4c8b4d3174d97dd22b872dd224329b100d4715d9ca5ee0b32ff3a28f1238ca188c9daed295f749c1adae4f74e70b5a758d07d424c81bd060d22fc0b6e790de82aa44c5c9ea6131831658bc0343d63e53fda04305eea1eb5ba1ffac10664d2aa4032b85c7c3eebc18326389bc0c29a222e7d5b87a02d2d54bab5064cbeb85b86464f75bb83a11af405e47ac4c5afc24eb9ba58f51442178d1752541723a8035808e544b4641a8ff115e88c15a2646232993079541aaa7c0fd8f4575ebbabdf01a9201f6752de174db1b8deb7862147e5ea0b50341eefc175b08e25bee4f2bedfa05989c76b42baf268791653fc601c0fcde2bc2a5350ed67f8c026201880416a4479c3684a774cde4d3a88a824522d187158c3724", 0x1000}, {&(0x7f0000000fc0)="1abdb219c14c906501ca22c81aba3265fa4febcd5499c1334fa6fc9c86bd7e3cf8c3c4b8b9bcaa9210cb682b821e61be926e7becb744f28a9730ab50362dfbc011768a3b32e688a6a030137591debc19b54230a8a8d3ca7cf97e516b8335b302a7ffc9f7365ca550ac6740b46564516abc00af3b6565759dd4ab", 0x7a}], 0x7, &(0x7f0000001480)=ANY=[@ANYBLOB="b000000000000000070100000d000000a0dc61839d9033c4005bc4aa85430f168a024faa0a6751df464b2838c39399f900c6a5927c4e44d615740499836692d18d5c9c376397b4dc2815772bab86bee6a8d6227ddcc510abcdec99a45c5f658198b4e846ed3ff0bf7049a9e4bfbbe09de308972c24007b7f74b0554f3ddf41b61a84453b647d8034b13cecc06522f544f7471971112ddeae9f825614025b62704a53367ca155b6be6a1746fd000000001dfe1daa925411238875ff0185655446c8629a98850e63c580", @ANYRESHEX=r4], 0xb0, 0x40000}], 0x2, 0x4010) (async) sendmmsg$nfc_llcp(r0, &(0x7f0000001200)=[{&(0x7f0000000500)={0x27, 0x0, 0x1, 0xc, 0xb, 0x4, "08cd878a27639b4f6e869d8d89ac19dd09e908ab2a0db191a6f56c10ae3a522a9c3f0ffd5b568297be99344adc8d3c7c08affb3f46ab2936d50d523c5f9956", 0x31}, 0x60, &(0x7f0000000a40)=[{&(0x7f00000006c0)="c7459cfad5d1eb6ee996c74ac8e887acb090233c3cb5d47b9f0a8d24b7305e952c0a87df56063ea01ba515760bb0899028e2ccff5116b66c9a7498e78101c168394bedad29f42b7bafad8ed6aeb00535e394f37e514db64e56be4caf3bbefdf0169c0e10fcd5b81d6c81c9a268fb", 0x6e}, {&(0x7f0000000740)="7672e972c211224cfdfbfc497186a007b3c945854ffe1790b30c4d552cb195d285ad806ef5c33db4d41365862d5ec05b2e93309fba8a7eea9bfc790f5026fa94ef64288c8ef4b14b733ff8392d2932dbfa37b29f1a34b8c62710736428272827775ef866f8310897e56822bb9f82fac831b6e5f3d946b961a6", 0x79}, {&(0x7f00000007c0)="29a3af61ea2c76e22f8f2541adc9c4ede97ea969e99e1a2af3a92060585ddb27c81ff33be70b486d54d1c3a33e1322deeff3ff3016b8fbfa26c156d2f162a9c6ea5d23f3fd613dc145afaf8377c14535b06d4a2cbec65b0354e0bd2203a54d4e842e7f1416271108721a77382361209a3d5c583046b94093e95a584ab18e876799cfe11117bd1b33fac6b63b99ac39a4c04f1721173487a886c279899d77f338ab1b6f907f12f727b9e9bc6a7525b98e68ae5fdcaef7b474f2c5d2ebbd27195f80f97beccd191fa1559afa16ecf520488e95d46479a5a40abb04bf488fead4227b0662ed8185260b4f5e08aeaa7ff9", 0xef}, {&(0x7f00000008c0)="e44fd7e3b9b821baa16245b885aa2c118925cb77fb6bf62edca653fa6455e92ea0c696a571de1bfdf72e09ca4b9c6fb19654827748af33c031aa88bbf92a964fbc80c49324", 0x45}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000000980)="e9d44a1b0a87a035664f7b4a7167c48988ca863782895def53dc40de14207232613bd66a494ec7dc3e7612627fa2c356dc5d3c80f86a58c191eacc84ea98d1e078c3a85fcc686c39e1da69e2cd0a2adcdeaaa55e0e62b505d92413f2c847de029fcd3254220b0d3b8177e41b527a9970bcbb459201c4aeb4ece9338f10f1e563b09ab3472f3a574b222d0409485bd714f4fb00bdb3", 0x95}], 0x6, &(0x7f0000000580)={0x20, 0x0, 0xff, "6369e49429aa475ae3da"}, 0x20, 0x40}, {&(0x7f0000000b00)={0x27, r11, 0xffffffffffffffff, 0x5, 0x50, 0x5, "c45fdee7f6c4c6144c57308261fa4662d30f956ea6eb7d6437bea6a5db28fe02834e05791eff12b63ff3e61520e13d8a8814eb619df5bb78e2d8bad55b9a6a", 0x30}, 0x60, &(0x7f00000010c0)=[{&(0x7f0000000b80)="0dfc324dc0f98e314444a39f661c844b07f9e6e477c38f23607284f0bc54484307af69f3a5ff21ba2fd5a993e737b1512c8b2480323bbdb2d1f70b493e04af00bcc55aaa99982a0df2d1d3862efc15a730c0c8c2a285a42494920c48c7dafa2e20ee8f4cf28aaa4ce418e7529ebed951431bf297ed06ab38b893cf1b4e93613fe27a16a74a468e1df09722329741ae92e41450aeb42232d6c2797f08a192ee91b883ed6c76ea72d6600579c8edecd87cb3a2b31eeb23f9909d5f73aabd60ce766b239660b032d0e13f8f60d8a6ef", 0xce}, {&(0x7f0000000c80)="9677dcb9251d49a1fe2f21c500fce8a49092b63fa62f660345522344913a5170922a5b174c21c94f9d3a291a57bc391e67020bf45a539410851f48582d9ddcc4c6eec59f5d8e77068f60ad27", 0x4c}, {&(0x7f0000000d40)="1aab7ce0d45233e15894d08d491a166d0a5dacfa5bc928374412877668f4fd26d1e0fd474d28160927982fa93eb8a4de526cee8dd0c0e81d99098c3726d2c23732457143e549d04d00ce5d2bcd798868e2ac811582c40e868d00cc0c149d8212bbd3479381ae2e0276f68c0354d2b24276c10f8bfb67702db30eaf0a586d80d4ff79211e31ae53b24aaa2746dbd97f5c7090688582576ad16b0f7c7645a7529e300c7fd4be564e35c66ad3424958d69a6c9f88afffd60a29c2d435cc346383f4976cceab2d139885c7a651b56b18ff9de8fa5f2f647d5cd21692ff7ad078b07e22ca9c846f8a321b7ccfd4b8a9d5cf64", 0xf0}, {&(0x7f0000000e40)="65d43e1ed60a3ed19cbee7743a97bc72e63df0687e19585cefc2f55329ac6ff3c0e783bc278757b58bbc1ec4aa54420ffe26e7eda96980cf394760ff4765d690fe031383c0a2c0c23d9b108b2a0c4e8296be9188abc01eadb1ccb8de0afe0d40a063d4d81d3f8b78aa0fe561db06a186d3599eb6a57394ac04c4a86d9e614e358776fcc4d54dbd85a9f3ebf5e5dab86fa16f0fb81ee1d64185ccd1ec88759267b3d6b59cc028341cfda7e05247495d69e539250b88bc8e090d13a51afc5b91daf640e2ecafe5f83bb581d8b8ae415c391c47954ee7e2", 0xd6}, {&(0x7f0000000f40)="6e3293a4b99868b650bda54ec56dd5b7b8b16a23e27934b19ff7a7b8e963b4c8c96eb2da987987d6a3d68c3d10d72268c82ff517bd49fdb32a9a2ce37667cc48a34d4722629d0d5d80c034c0ca55a575dda99e5aa3c6b38fdf2f113a3ba08a3881c25eb68d0356ffc666d691cb5f12694955d803fbfc9cd1e98c5cc8030d39", 0x7f}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000000fc0)="1abdb219c14c906501ca22c81aba3265fa4febcd5499c1334fa6fc9c86bd7e3cf8c3c4b8b9bcaa9210cb682b821e61be926e7becb744f28a9730ab50362dfbc011768a3b32e688a6a030137591debc19b54230a8a8d3ca7cf97e516b8335b302a7ffc9f7365ca550ac6740b46564516abc00af3b6565759dd4ab", 0x7a}], 0x7, &(0x7f0000001480)=ANY=[@ANYBLOB="b000000000000000070100000d000000a0dc61839d9033c4005bc4aa85430f168a024faa0a6751df464b2838c39399f900c6a5927c4e44d615740499836692d18d5c9c376397b4dc2815772bab86bee6a8d6227ddcc510abcdec99a45c5f658198b4e846ed3ff0bf7049a9e4bfbbe09de308972c24007b7f74b0554f3ddf41b61a84453b647d8034b13cecc06522f544f7471971112ddeae9f825614025b62704a53367ca155b6be6a1746fd000000001dfe1daa925411238875ff0185655446c8629a98850e63c580", @ANYRESHEX=r4], 0xb0, 0x40000}], 0x2, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000200)="9a78a2c545e004da799ee8f8dd9f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x20000090) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x20000090) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r13, 0x103, 0x6, &(0x7f00000019c0)=0x1ff, 0x4) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e0ff040108000a00", @ANYRES32], 0x48}}, 0x0) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80100002e00090023bd7000fbdbdf2505000000b40111"], 0x1c8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r3 = socket(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x24008040) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x0, 0xfffffffa, {{0x6, 0x4, 0x2, 0x26, 0x18, 0x65, 0x0, 0x36, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@noop]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r4}, 0xc) close(r3) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r4, 0x16, 0x0, 0x401, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x80802, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r7, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r8, r6, 0x4, r6}, 0x7) ppoll(&(0x7f00000005c0)=[{r5, 0x2000}], 0x1, 0x0, 0x0, 0x0) write(r5, 0x0, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x40, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x1c, r1, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x2400c840) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x77, &(0x7f0000000000)=r7, 0x62) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x178, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffef]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x4001, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$inet_mreqn(r10, 0x0, 0x23, 0x0, &(0x7f00000002c0)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x7fffc}, {0xa, 0x0, 0x1, @mcast1}, 0x1, {[0x0, 0x0, 0x2000000, 0x0, 0xe19, 0x0, 0x1c3]}}, 0x5c) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000040c0)=ANY=[@ANYBLOB="2000000076001f03000000000000000008000000ffffe7ff05000d80"], 0x20}], 0x1, 0x0, 0x0, 0x8080}, 0x24000010) executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x3, 0x0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0xb8, 0x18}, 0xc) syz_emit_ethernet(0x416, &(0x7f0000000080)={@random="ad90e0ad921d", @empty, @void, {@mpls_mc={0x8848, {[{0x2}, {0x8, 0x0, 0x1}], @ipv6=@generic={0xf, 0x6, '6lG', 0x3d8, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, {[@routing={0x6c, 0x12, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @local, @private0, @remote, @local, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @hopopts={0x0, 0x21, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1, @ra={0x5, 0x2, 0x1}, @generic={0x8, 0x6, "5062965abe80"}, @pad1, @pad1, @generic={0x4, 0xe3, "bcd0d5815c676be7d6c92f4dbfd35c5ca8010ee0db5ebc6d2ac05229a8710fa0e0527e3f389de31b37b5bc276827c484a1dcdde24eac5d6ac2165d5bb8ef1573b7c78cf215fdd9f4b8c0c0e2970abff2d91c380b28bee924e321ef7b30939089e415f6b0a4ae550b5f7ee3c878155b918e9440bec701d15a502220b263e73cda562451be238bb41e433e840350e42bafeaaf60b9fc9f0766fc3126187f691614700337488520d415cdfdc7d9154d8a0c74d130d30435705a584bfb98a2a761fbe7921f0248431f809f309282fea91f326f82054dee59278d10bb3776d303bbab2b0936"}]}, @routing={0x2b, 0xc, 0x2, 0x2, 0x0, [@loopback, @loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, @remote]}, @srh={0x88, 0x10, 0x4, 0x8, 0x6, 0x40, 0x5e, [@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @private0, @loopback, @private0]}, @routing={0x0, 0xa, 0x1, 0x9e, 0x0, [@mcast2, @rand_addr=' \x01\x00', @private0, @private0, @remote]}], "efe074625123aab12306c8ba35a9bff74ac428600fd8e3aa48b3740d52b9ba284ca710668d133357cc1d098b96ff70dae033c2766e85dbdf085720192d4cc629506d980855649849bc06b0c72933b2f27d6fc2f6fcdb17d06ef6116221b45dc540724e753a67e31af2e7aac9623e96bfef713c5f02dc80569fb66b0c49c6e15df61d6197589aa944cf933448363672ea5c184e8e69d3939bf0aa9bf2e6d0d27c7ccecfa6bd2f933b6ce655ae4fa6fd3c4afcd8f48309b6ff4fafea9ab384410eed216b129f06bcf692f7dbae55974134222d3c0822df89441908eb27601d9b9d"}}}}}}, &(0x7f00000004c0)={0x1, 0x3, [0xdb2, 0x850, 0x1fa, 0x94f]}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000500)={0x1bd}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000500)={0x1bd}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) syz_extract_tcp_res$synack(&(0x7f00000005c0), 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000600)={0x0, 0xfff7, 0x6, [0x5, 0x6, 0x17, 0x3, 0x2, 0xa]}, &(0x7f0000000640)=0x14) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000680)={r4, 0x926d}, 0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000680)={r4, 0x926d}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000940)={{r3}, r6, 0x8, @inherit={0x50, &(0x7f00000008c0)={0x1, 0x1, 0xc30, 0x1000, {0x32, 0x999, 0x55c5, 0xf, 0x8}, [0x2]}}, @devid}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000940)={{r3}, r6, 0x8, @inherit={0x50, &(0x7f00000008c0)={0x1, 0x1, 0xc30, 0x1000, {0x32, 0x999, 0x55c5, 0xf, 0x8}, [0x2]}}, @devid}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000001a40)=0xe8) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000001a80)={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8001}, {0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1, {[0x52bb, 0x4, 0x8, 0x7, 0xd, 0x8, 0xa, 0x80]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000001a80)={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8001}, {0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1, {[0x52bb, 0x4, 0x8, 0x7, 0xd, 0x8, 0xa, 0x80]}}, 0x5c) socket$rds(0x15, 0x5, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000001b00)=0x1, 0x4) (async) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000001b00)=0x1, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000001dc0)={{'\x00', 0x3}, {0xfffffffffffffff4}, 0x4e, 0x0, 0x0, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)="a0942386dc54a4c04f0144e089c70ed2ac2becb007dc8d2b6af77139055e6dff0880745fbb047fecc0e811f6a0feeb4d585cd6cd", 0x34, 0x0, &(0x7f0000001c00)={0x2, 0xb2, {0x1, 0xc, 0x3, "c18b85", 0xa2, "d5b8e4d19e75d0572cb3f51457d1f5ab128a2bac7271dbec8854a32ed16c6f25ee2ecc2cd8bafdf0cef47499a392dc779bafd09bb2c928c404c32d228fc32a491b717489dbef9d75b7b69a5a0659c21d544d7bed67666757abc0ed8bde221a6b128ad409d6266ff0b4261cc4be34f1c1713315181fd64d45832b2d6f2ae8e62646ab9829fdb356e592633305ccc2c94b181b6a77610846aa623a632c8a823680af40"}, 0xff, "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"}, 0x1bd}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001e80)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001e80)=0x0) sendmsg$netlink(r9, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001e40)={0x24, 0x1a, 0x10, 0x70bd25, 0x25dfdbfc, "", [@typed={0x14, 0x130, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x24}, {&(0x7f0000001ec0)={0x2c0, 0x36, 0x8, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x10b, 0x0, 0x0, @pid=r10}, @typed={0x6, 0xce, 0x0, 0x0, @str='\xff\xff'}, @generic="c00d3ef4f63076b4181badfa7b5ca48ddf980835671c650be01c285378114aef2d0a62b4b542883ee197dc9c57123ddb4559b510dcbc7c85abc0525a18438481a5c45dfd9f7ee4df8b6b84d69730ae4bf5452a3960d9098dd8a5f7626851c70fa81b43c933364a6d8bd33de2a02f729e9d09c4e4c0b0c8dd57d491282689efd45ddf569308e077d3", @generic="7394e39f329cd50931e10ba1866c3314d02c9cdf08c3151e0980bf78cd141177a63a07f0fbd1a7c49c0d6193f3ad7c4b7ab0127409838b162e917a3993566e9c7cb372e3240706a85d74d9ef011cdec53a97b269b8e0fc96b4a449b8ef240a06f2c5d23b378e5ddba24ab4f6626d9d88512c02fee2725461d14aeaee09e7f227eeb0ae1c3ed1fc6cdb927a8a301d8c43d0a8b96463ae22ac6facabc74cfebfe6b09cb9da4d45ede9deaa7ecb", @nested={0xb5, 0x83, 0x0, 0x1, [@nested={0x4, 0x33}, @generic="9258b93b4d8e6bd322a0d28067f3ba3cfe50b32bc1f8450fe35875751b28dda77b10e6d707e37cb93310acb15bf8f3c87fb7fcdcefd54fba30dcbd4010e825538b8560ef0faf89b99eb67f905fec53eb644bb942596ba0be13abcb0573a1927818d8bcc81e0a397cd5c22f06143161220a9eba5ba557109d3d7a1d6f3c7cbec382c781f4788a93da1bf569a3938f67bff3f47004f6f38dc63009f715be1d97734710ab01962ee6c6c5", @nested={0x4, 0x91}]}, @nested={0xb1, 0x6e, 0x0, 0x1, [@nested={0x4, 0xc0}, @generic="3a07045ac28a63886a0abc826d01357b913628727b1fe36e0470dc6cb33240a067470b0a000e3a8c0842db78ed79fec8ba260014a4e4d5c5d5a7dcd91350c28e5473325366f73043bfe1873abb807be3505fcadde8bb602914aa1bc4749ec994392896a91a488bbd2604f815a7894db20b31a3c411b1edcb92cc40db9c109a292ba9d53049bdedaf2d6e982a21", @typed={0xc, 0xce, 0x0, 0x0, @u64=0xf}, @typed={0x7, 0x1f, 0x0, 0x0, @str=' \x01\x00'}, @typed={0x8, 0x9f, 0x0, 0x0, @uid=r7}]}]}, 0x2c0}], 0x2, 0x0, 0x0, 0x20000045}, 0x40040a1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002200)={0x0, 0xabd9, 0x4f1, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002600)={r11, "b1044fd3d3c3bd4912a5c7fe51249cb4"}) socket$igmp(0x2, 0x3, 0x2) (async) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000003600)={0x1, 0x4, 0x5, 0x1, @vifc_lcl_addr=@empty, @rand_addr=0x64010100}, 0x10) (async) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000003600)={0x1, 0x4, 0x5, 0x1, @vifc_lcl_addr=@empty, @rand_addr=0x64010100}, 0x10) bind$rds(r8, &(0x7f0000003640)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000003680)=@ccm_128={{0x304}, "3a0ac22d201b016b", "abd224e5d59612db17a1b0ad7864d24f", "d44494c4", "c6141f4a3adf149b"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000003680)=@ccm_128={{0x304}, "3a0ac22d201b016b", "abd224e5d59612db17a1b0ad7864d24f", "d44494c4", "c6141f4a3adf149b"}, 0x28) getsockopt$IP_SET_OP_GET_BYINDEX(r9, 0x1, 0x53, &(0x7f00000036c0)={0x7, 0x7, 0x4}, &(0x7f0000003700)=0x28) syz_extract_tcp_res$synack(&(0x7f0000003740), 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003840)={0x2c4, 0x0, 0x8, 0x70bd2b, 0x6, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x9}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x0, 0x4, 0x19d, 0x5, 0x739, 0x2]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x6, 0x16, 0x16, 0x3d, 0x18, 0x6c, 0x3, 0x30, 0x5, 0xf0, 0x5, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x4, 0x8, 0xd, 0x8, 0x8, 0x3f53]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x9, 0xd, 0x4, 0x1, 0x401, 0x6, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2, 0xc, 0x7, 0x3, 0x800, 0x7, 0x9, 0x81]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x18, 0x16, 0x16, 0x5, 0x1, 0x30, 0xc, 0x12, 0x60, 0x48, 0xc, 0x36, 0x30, 0x6c, 0x60, 0x18, 0x1, 0x24, 0x18, 0x36, 0x2, 0xc, 0x0, 0x60, 0x0, 0x4, 0x0, 0x36, 0x2, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xd, 0x1ff, 0x4, 0x0, 0xfc, 0x2]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x0, 0xfb, 0x6e, 0x10, 0x8001, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x48, 0xa, 0x9, 0x12, 0x1b, 0x12, 0x30, 0x1, 0x9, 0x5a, 0x18, 0x2, 0x6c, 0x4, 0x18, 0x24, 0x60, 0x48, 0x4, 0x5, 0x1b, 0x9, 0x37d7febec985c06, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0xa}, {0x4, 0x6}, {0x0, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x7}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x1}, {0x7}, {}, {0x6}, {0x2, 0x8}, {0x1, 0x2}, {0x4, 0x1c}, {0x5, 0x9}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x2, 0x2}, {0x4, 0x3}, {0x6, 0x5}, {0x3, 0x4}, {0x1}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x7}, {}, {0x4, 0x3}, {0x3, 0x9}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0xa}, {0x6, 0x15}, {0x7}, {0x3, 0x8}, {0x5}, {0x5, 0xa}, {0x7, 0x9}, {0x2}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x18, 0x6, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x5, 0xd2, 0x9, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x3, 0x6, 0x4, 0xc, 0x5, 0x2, 0x1b, 0x48, 0x24, 0x48, 0x4, 0x24, 0x9, 0xb, 0x18, 0x30]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0xb, 0x48, 0x5, 0x24, 0x30, 0x16, 0x6c, 0x36, 0xc, 0x36, 0x3, 0x16, 0xd, 0x24, 0xc, 0x2, 0x6c, 0x60, 0x4, 0x1, 0x5, 0x1b, 0x12, 0xb, 0x2]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6}, {0x4, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x48, 0x36, 0x22, 0x3, 0xb, 0x16, 0x6, 0x1b, 0x9, 0x5, 0x3, 0x12, 0x9, 0x5, 0x64, 0x18, 0x4, 0x36, 0x48, 0x12, 0x12, 0x16, 0x60, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x6, 0x4}, {0x6, 0x1}, {0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x3, 0x6}, {0x6, 0x4}, {0x5, 0x6}, {}, {0x7, 0x1}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x9}, {0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x9}, {0x6, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x36, 0x4, 0x24, 0x30, 0x9, 0x1, 0x16, 0x50, 0x24, 0xb, 0x2, 0xb, 0xb, 0x5, 0x1, 0xb, 0x5e, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x8000}, 0x80) executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random='\x00\t\x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0xb, 0xa2, [@multicast2, @broadcast]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) executing program 4: socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x94) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0xb, 0x4, 0x0, 0x4, 0x2c, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "d1620f402ee98f4dc8"}]}]}}}}}}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@mpls_delroute={0x30, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x5, 0x12, {0x29, "498eb9b3372d0000000000004000"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) unshare(0x2c020400) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000c53d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328562b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaeaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509afd15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4df92cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2571f67a7c7819b0889d7614ab5e25b468ab3102cab53f312f2e29075891bd21c2301f338b8a961a01fb282fd4e53d8c0a2ebb71ceaf7e3b34e4502b5fad975855ce0e4d4c163519fabd209c3d4302f46c90a19d8a0a03396e8949a91184e8d680f724d65700b9a18d28e22810be9fb37ce6cac86c45a03165c1af3152a3c21dc927f0697343abf80e3aae6149b14d08f188e61f900bbb0eae54b0566ad8489918ddc866871e06a5f50cf35b551f7b4c7ae0300838056a65d2e0058c9d8bf1c99d40fb3e2ecdbd68b5f79003c04266a43b8794a5d90b2348f4e81ed1d00000000000000000000e321e9aa37fc5cbee1f627e86e2f58a24ccd9c0376772b2bd5e99ab9d86b753de57a5f40714d11282d809bf6bf5f7009ff38db199273d029f5b65b573722b8131f473775031a7889a2e6b6e804b26429c839373dffd00347a65a2e8ca7d387857dddcea793ce7a08e92648dd663d25d5374ddf20e98e824b269a199210b7064fb6cda054ccef091d11"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfe22, &(0x7f0000000040)={0x0}}, 0x0) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7030000ffffff90850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x360}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x360}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) executing program 3: r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={r1, 0x76, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adc"}, &(0x7f0000000180)=0x7e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0), 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000006200)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000de45144887ef1a790000080000002978023f2c6f74b02496f827c66f08e0269618b381abdb5ed317a43d577a80ed0ddb5a8e99931e00"/75], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000e8ff14000100fc00000000000000000000000000000008001700"], 0x38}}, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b", 0x2}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={r6, 0x8}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000c80)=ANY=[@ANYRES64=r2, @ANYRES64=r4, @ANYRES64=r1, @ANYRESOCT=r6, @ANYRESDEC=r3, @ANYRES32=r6], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r8, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r8, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3d8, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0a0800452000c400660a0101010101861500000001050fa7c36a32a1552f5c408b69067807273f", @ANYRES32=0x41424344, @ANYRES32=r9, @ANYBLOB="f00400069078fffefe0bf9897f769eadfe076522020806d7b6339f040213092dec6ebea9ecbf0803a7fe05f989520000d4934eb0ad7daf2d9e32d0bc50ace9553acd6da8d74c1fff7536f33aa7b6eee35a24dc2f9bbdd112446c89c7ee983995e2b4c482"], &(0x7f00000000c0)={0x1, 0x4, [0x594, 0xecf, 0xb98, 0x99b]}) syz_emit_ethernet(0x1f7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0xa7) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0x0, 0x2d}, 0xc) epoll_create1(0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1210c0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500005c00660000002f9078ac1e0001e0000001000086dd0048907803000000029a9598e5be2a2129eca8e913620485f399a5b101e20c84f5335e76ca45330a2f58"], 0x6e) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r8, 0x211, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000091400078008001140000000000500150001000000050005000a000000050001000700000005000400000000000900020073797a32000000000c000300686173683a6970"], 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x7c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040) executing program 3: unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)=' \x00'/14, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) executing program 1: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x8880}, 0x20000081) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)={0x250, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x238, 0x1, 0x0, 0x1, [@nested={0x231, 0xf3, 0x0, 0x1, [@generic="4d6162974756486ad90a0246c5165918226c866b5293728dc5ee01e07823881f0c272b3301cc958ee776688d2b276c1c7f5cdf30e827f21e0000000000", @generic="d84197339ff6b45c110d8608efed5ecda66700199f663059790bf6688f93d36b732483bdb5bb894f72b6eae06f786f8d67300e6dc3a68e94c03de804b5022ec0ce1e64a90688f1370683160045d88e5639dac9b0ebe8c2e279975ac66139c7ce4deccc77b1a1132abcf0a7a29653f4ae116386d01894108e92fc36b46902204df866124f6be8b980be6a23f0ffd03ec25b19cf8e64e452bcd366733083878b202cbfdac77e862224bda450f6464399fc9f94095d31524575cbb15efda429b82724fb3849456bb7926f1a63f64a49baef", @nested={0x11d, 0x124, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}}, @nested={0x4, 0x129}, @generic="f843606b009d9195dfd758fb99eb88fdb9550a54d5a93eac5dc73f72fb543e3aea1ed863319115b20a47606d4cb233b189185722931742eb3d11d6740b4fb9c3a69c7ace13db05305db22b5c39239aa6e56bdfe7eb88fc37e47941d6c2aaaf96b1bc0d126557dd4a1d9eb4eef4e0f0675a5d6d83b50dc1736829529309ffdabbe0dcd4ba758e3306695d7196e3de03f52b2ce0c089416c11c0108cd62c57b57d275b98f3bcc474d51aa2c01af2a3aa87e41dd7c0b9032fa24188b2b6fec7abb66a87f3d69697e5adb6d84250d7b0e7f11d3e18e1ae0ee1523796d9e61eee3aac1df605bbc4f17e0c4b67663ffbbba1fbd9d8536eda", @typed={0xc, 0xb9, 0x0, 0x0, @u64=0xfffffffffffffffc}]}]}]}]}, 0x250}}, 0xc000) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0xffffffef}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x40) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, 0x0, 0xc100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x9b, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) (async) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}]}}}]}, 0x40}}, 0x0) executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010001", 0x7) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000300), 0x49249249249259b, 0x840) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x64, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x11}}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}]}]}, 0x64}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000002c0)=0x80000001, 0x4) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}]}, 0x20}, 0x1, 0x7}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, &(0x7f0000000080)="8d64c1933f80e4896ba6ddb7b2629a66005b964fc0c2bef6d3b013482da76b74725000365dfd411c7908ed2454f8b7e8f73df49a44cd8845ed37403af0c0a8a738ec", 0x42, 0x4000000, 0x0, 0x0) executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'macvlan0\x00', @random="8dffffff0600"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000180)}, 0x20) unshare(0xc040480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r11, 0x0, 0x0, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4060800) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x5dc, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c8, 0x1, [@m_police={0x5c4, 0x3fff, 0x0, 0x0, {{0xb}, {0x434, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0xded, 0x0, 0x4, 0xfffffffc, 0x0, 0x2, 0x800, 0x16, 0x8, 0x5, 0x4, 0x3, 0xb, 0x4, 0x4, 0x10, 0xd, 0xb873, 0x4, 0x6, 0x3, 0x7, 0x4, 0x2, 0x7, 0x7, 0x7, 0x3, 0x5, 0x4, 0x80000001, 0x2, 0x6, 0xc97f, 0x68dc, 0xd6, 0x80000001, 0x2, 0xffffffff, 0x4, 0x9, 0x5, 0x101, 0x42bc, 0xe, 0x6, 0x8001, 0x8, 0x800, 0x0, 0x2, 0x3, 0xb45, 0x7, 0x4, 0x40, 0xffffffff, 0x1, 0x5, 0x9, 0x5, 0x10000, 0xfffffffc, 0xb58, 0x7, 0x5, 0x0, 0x10001, 0x8, 0x7fffffff, 0x9, 0x1, 0x0, 0x8480, 0x40, 0x7ff, 0xb92e, 0x1, 0x8, 0xaf0, 0xff000000, 0x1, 0x7, 0x5, 0x2, 0xffffa044, 0x4, 0x8000, 0x7, 0x2, 0x7, 0x88c, 0x8, 0x4, 0x5, 0x15, 0xffffffff, 0x35f, 0x9, 0x1, 0x80000001, 0x8, 0x100, 0x7, 0x4, 0x9, 0x9, 0xe0, 0x3, 0x1000, 0x5, 0x9, 0x7a92, 0x995, 0x0, 0x6, 0x8, 0x9, 0x10001, 0xfffffff9, 0x5, 0xd2, 0x34, 0xc, 0x8001, 0xc, 0xffff, 0x1, 0x8, 0x4, 0x2, 0x4, 0xeb, 0xffff4a3a, 0x2, 0xfffffeff, 0xfffff558, 0x5, 0xffff, 0x7, 0x7ff, 0x8, 0x7f, 0x3, 0xcb, 0x1, 0xfffffffd, 0x6, 0x12, 0x200000, 0xb388, 0x4, 0x800000, 0x6, 0xfffffff9, 0x1, 0x6e3, 0x3, 0x6, 0x100, 0x3, 0xffff, 0x1, 0x401, 0x2, 0x10, 0x806, 0x10, 0x1, 0x3, 0x0, 0x1ff, 0x7, 0x32, 0x724, 0x1, 0x51, 0x401, 0xb24, 0xffffffff, 0x9, 0xa50, 0x8, 0x3, 0xfffffe4a, 0x85fb, 0x81, 0x1, 0x5, 0x7fff, 0x4, 0x8, 0xd, 0x5ae0, 0x2, 0x2b, 0x2, 0x7, 0x8, 0x8, 0x1ff, 0x4, 0x1000, 0x6, 0x1, 0x7, 0x8, 0x5, 0x200, 0x401, 0x3, 0x3, 0x2ffccf5, 0x8, 0x80000000, 0x2, 0x40, 0x10000, 0xed36, 0x400, 0x1, 0x0, 0xf1e2, 0xbee, 0x10001, 0x9, 0x200, 0x4, 0xd, 0x8, 0x1, 0x1, 0x6, 0xb81, 0x1, 0x81, 0x4, 0x1, 0xbbda3e1, 0x8, 0x3, 0x8003, 0x4, 0x80000001, 0x7f, 0x0, 0x1, 0xe, 0x1, 0x80000000, 0x7fffffff, 0x0, 0xc, 0xe1f0]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]]}, {0x165, 0x6, "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"}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000036a00010625bd7000fbdbdf250a0000000000000408000a"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) executing program 2: r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={r1, 0xb1, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a"}, &(0x7f0000000180)=0xb9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) executing program 1: r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x3fa, 0x8, "aab9385406e23e3ef07f3a517acb8f927969f94b85d9a03041d2e7306261e662f1375d0f4b61df265c1373100b051feed0825fcc1a65e8a48dc30529c6918e0fb70cf90674149070d779f623af2aabef62b3b29c4760d2d487bccc42280b"}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000080)=""/245, &(0x7f0000000180)=0xf5) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}]}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000280)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r5}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000380)) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f00000003c0)=""/36, &(0x7f0000000400)=0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x2000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x500, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x41, 0x8, "c8b4fde7dd1638db17d1d982831825c1b3867de0309d5da8fe3e50e2057c12d2ef42b4387efae65aa05fd277dfce4b41fb19410b0d90781da6b2eecbf1"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x10c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xdf, 0xc, "3ea7932d67b8ccfdff4659e5e34476513a30e394fda2a39d5fac95e006ee887528be3ed5dc2e39a1b45e14cdbe025484681f8c97d73bc640f1f0350dc8d28b6fd7a4c4ede67833ea3ffc0878a9a88fe842943a9bdf89340ac1400d458aa4c67ac546f1e9d0425c5452c152af3ad6a91fbbd34ee6bc7a9ea42212368752712e64b2f7ed1e6a72464506b2e58159cda33410e3616088a1a83540f0f41d40a56ff0d4f9d4c46661987aa71dfe35aa83d82800104e1745db369b4cf1cec510a9b6a062714cd36a6d59d15ec5f879743ae4111db889f259f19559a3064b"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x118, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x9e, 0xc, "0d815b0b240982ef2e580272c38397f695cf5921fd81025aa8874ab5ce77e952f80e8f43b118626a85c63592b7a5dbdc8d98a15e042b6e15100fcd92d4b447aa1869e14e3c41945982bd8d1ca6aff367cd2c4f7639ed6089ba420a86b2f62d6d40fb50a24b2bebb1be6fa481163a9b23df3ceb719e70b3be979618e6301e23550fe9435954798a4e286d594c6b51dfbd8fe2fa5bb5a7aee19122"}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe6a4b76}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6619e88a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x595bea9e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x330}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) r11 = accept4(r1, &(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000ac0)=0x80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b00)={r7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x90, r10, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000d40)={'virt_wifi0\x00', 0x3}) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000d80)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000dc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r16, 0x50009418, &(0x7f0000000fc0)={{r15}, r17, 0x1e, @unused=[0x80000000, 0x3, 0x5, 0xd832], @devid}) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000001fc0)=r4) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp bisect: bisecting 30 programs bisect: split chunks (needed=false): <29> bisect: split chunk #0 of len 29 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [40, 16, 6, 21, 14, 6, 30, 23, 9, 11, 9, 13, 17, 21, 15, 4, 30, 30, 14, 30] detailed listing: executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x3, 0x0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0xb8, 0x18}, 0xc) syz_emit_ethernet(0x416, &(0x7f0000000080)={@random="ad90e0ad921d", @empty, @void, {@mpls_mc={0x8848, {[{0x2}, {0x8, 0x0, 0x1}], @ipv6=@generic={0xf, 0x6, '6lG', 0x3d8, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, {[@routing={0x6c, 0x12, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @local, @private0, @remote, @local, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @hopopts={0x0, 0x21, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1, @ra={0x5, 0x2, 0x1}, @generic={0x8, 0x6, "5062965abe80"}, @pad1, @pad1, @generic={0x4, 0xe3, "bcd0d5815c676be7d6c92f4dbfd35c5ca8010ee0db5ebc6d2ac05229a8710fa0e0527e3f389de31b37b5bc276827c484a1dcdde24eac5d6ac2165d5bb8ef1573b7c78cf215fdd9f4b8c0c0e2970abff2d91c380b28bee924e321ef7b30939089e415f6b0a4ae550b5f7ee3c878155b918e9440bec701d15a502220b263e73cda562451be238bb41e433e840350e42bafeaaf60b9fc9f0766fc3126187f691614700337488520d415cdfdc7d9154d8a0c74d130d30435705a584bfb98a2a761fbe7921f0248431f809f309282fea91f326f82054dee59278d10bb3776d303bbab2b0936"}]}, @routing={0x2b, 0xc, 0x2, 0x2, 0x0, [@loopback, @loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, @remote]}, @srh={0x88, 0x10, 0x4, 0x8, 0x6, 0x40, 0x5e, [@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @private0, @loopback, @private0]}, @routing={0x0, 0xa, 0x1, 0x9e, 0x0, [@mcast2, @rand_addr=' \x01\x00', @private0, @private0, @remote]}], "efe074625123aab12306c8ba35a9bff74ac428600fd8e3aa48b3740d52b9ba284ca710668d133357cc1d098b96ff70dae033c2766e85dbdf085720192d4cc629506d980855649849bc06b0c72933b2f27d6fc2f6fcdb17d06ef6116221b45dc540724e753a67e31af2e7aac9623e96bfef713c5f02dc80569fb66b0c49c6e15df61d6197589aa944cf933448363672ea5c184e8e69d3939bf0aa9bf2e6d0d27c7ccecfa6bd2f933b6ce655ae4fa6fd3c4afcd8f48309b6ff4fafea9ab384410eed216b129f06bcf692f7dbae55974134222d3c0822df89441908eb27601d9b9d"}}}}}}, &(0x7f00000004c0)={0x1, 0x3, [0xdb2, 0x850, 0x1fa, 0x94f]}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000500)={0x1bd}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000500)={0x1bd}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4) syz_extract_tcp_res$synack(&(0x7f00000005c0), 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000600)={0x0, 0xfff7, 0x6, [0x5, 0x6, 0x17, 0x3, 0x2, 0xa]}, &(0x7f0000000640)=0x14) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000680)={r4, 0x926d}, 0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000680)={r4, 0x926d}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000940)={{r3}, r6, 0x8, @inherit={0x50, &(0x7f00000008c0)={0x1, 0x1, 0xc30, 0x1000, {0x32, 0x999, 0x55c5, 0xf, 0x8}, [0x2]}}, @devid}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000940)={{r3}, r6, 0x8, @inherit={0x50, &(0x7f00000008c0)={0x1, 0x1, 0xc30, 0x1000, {0x32, 0x999, 0x55c5, 0xf, 0x8}, [0x2]}}, @devid}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000001a40)=0xe8) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000001a80)={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8001}, {0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1, {[0x52bb, 0x4, 0x8, 0x7, 0xd, 0x8, 0xa, 0x80]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000001a80)={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8001}, {0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1, {[0x52bb, 0x4, 0x8, 0x7, 0xd, 0x8, 0xa, 0x80]}}, 0x5c) socket$rds(0x15, 0x5, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000001b00)=0x1, 0x4) (async) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000001b00)=0x1, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000001dc0)={{'\x00', 0x3}, {0xfffffffffffffff4}, 0x4e, 0x0, 0x0, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)="a0942386dc54a4c04f0144e089c70ed2ac2becb007dc8d2b6af77139055e6dff0880745fbb047fecc0e811f6a0feeb4d585cd6cd", 0x34, 0x0, &(0x7f0000001c00)={0x2, 0xb2, {0x1, 0xc, 0x3, "c18b85", 0xa2, "d5b8e4d19e75d0572cb3f51457d1f5ab128a2bac7271dbec8854a32ed16c6f25ee2ecc2cd8bafdf0cef47499a392dc779bafd09bb2c928c404c32d228fc32a491b717489dbef9d75b7b69a5a0659c21d544d7bed67666757abc0ed8bde221a6b128ad409d6266ff0b4261cc4be34f1c1713315181fd64d45832b2d6f2ae8e62646ab9829fdb356e592633305ccc2c94b181b6a77610846aa623a632c8a823680af40"}, 0xff, "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"}, 0x1bd}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001e80)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001e80)=0x0) sendmsg$netlink(r9, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001e40)={0x24, 0x1a, 0x10, 0x70bd25, 0x25dfdbfc, "", [@typed={0x14, 0x130, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x24}, {&(0x7f0000001ec0)={0x2c0, 0x36, 0x8, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x10b, 0x0, 0x0, @pid=r10}, @typed={0x6, 0xce, 0x0, 0x0, @str='\xff\xff'}, @generic="c00d3ef4f63076b4181badfa7b5ca48ddf980835671c650be01c285378114aef2d0a62b4b542883ee197dc9c57123ddb4559b510dcbc7c85abc0525a18438481a5c45dfd9f7ee4df8b6b84d69730ae4bf5452a3960d9098dd8a5f7626851c70fa81b43c933364a6d8bd33de2a02f729e9d09c4e4c0b0c8dd57d491282689efd45ddf569308e077d3", @generic="7394e39f329cd50931e10ba1866c3314d02c9cdf08c3151e0980bf78cd141177a63a07f0fbd1a7c49c0d6193f3ad7c4b7ab0127409838b162e917a3993566e9c7cb372e3240706a85d74d9ef011cdec53a97b269b8e0fc96b4a449b8ef240a06f2c5d23b378e5ddba24ab4f6626d9d88512c02fee2725461d14aeaee09e7f227eeb0ae1c3ed1fc6cdb927a8a301d8c43d0a8b96463ae22ac6facabc74cfebfe6b09cb9da4d45ede9deaa7ecb", @nested={0xb5, 0x83, 0x0, 0x1, [@nested={0x4, 0x33}, @generic="9258b93b4d8e6bd322a0d28067f3ba3cfe50b32bc1f8450fe35875751b28dda77b10e6d707e37cb93310acb15bf8f3c87fb7fcdcefd54fba30dcbd4010e825538b8560ef0faf89b99eb67f905fec53eb644bb942596ba0be13abcb0573a1927818d8bcc81e0a397cd5c22f06143161220a9eba5ba557109d3d7a1d6f3c7cbec382c781f4788a93da1bf569a3938f67bff3f47004f6f38dc63009f715be1d97734710ab01962ee6c6c5", @nested={0x4, 0x91}]}, @nested={0xb1, 0x6e, 0x0, 0x1, [@nested={0x4, 0xc0}, @generic="3a07045ac28a63886a0abc826d01357b913628727b1fe36e0470dc6cb33240a067470b0a000e3a8c0842db78ed79fec8ba260014a4e4d5c5d5a7dcd91350c28e5473325366f73043bfe1873abb807be3505fcadde8bb602914aa1bc4749ec994392896a91a488bbd2604f815a7894db20b31a3c411b1edcb92cc40db9c109a292ba9d53049bdedaf2d6e982a21", @typed={0xc, 0xce, 0x0, 0x0, @u64=0xf}, @typed={0x7, 0x1f, 0x0, 0x0, @str=' \x01\x00'}, @typed={0x8, 0x9f, 0x0, 0x0, @uid=r7}]}]}, 0x2c0}], 0x2, 0x0, 0x0, 0x20000045}, 0x40040a1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002200)={0x0, 0xabd9, 0x4f1, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002600)={r11, "b1044fd3d3c3bd4912a5c7fe51249cb4"}) socket$igmp(0x2, 0x3, 0x2) (async) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000003600)={0x1, 0x4, 0x5, 0x1, @vifc_lcl_addr=@empty, @rand_addr=0x64010100}, 0x10) (async) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000003600)={0x1, 0x4, 0x5, 0x1, @vifc_lcl_addr=@empty, @rand_addr=0x64010100}, 0x10) bind$rds(r8, &(0x7f0000003640)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000003680)=@ccm_128={{0x304}, "3a0ac22d201b016b", "abd224e5d59612db17a1b0ad7864d24f", "d44494c4", "c6141f4a3adf149b"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000003680)=@ccm_128={{0x304}, "3a0ac22d201b016b", "abd224e5d59612db17a1b0ad7864d24f", "d44494c4", "c6141f4a3adf149b"}, 0x28) getsockopt$IP_SET_OP_GET_BYINDEX(r9, 0x1, 0x53, &(0x7f00000036c0)={0x7, 0x7, 0x4}, &(0x7f0000003700)=0x28) syz_extract_tcp_res$synack(&(0x7f0000003740), 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003840)={0x2c4, 0x0, 0x8, 0x70bd2b, 0x6, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x9}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x0, 0x4, 0x19d, 0x5, 0x739, 0x2]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x6, 0x16, 0x16, 0x3d, 0x18, 0x6c, 0x3, 0x30, 0x5, 0xf0, 0x5, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x4, 0x8, 0xd, 0x8, 0x8, 0x3f53]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x9, 0xd, 0x4, 0x1, 0x401, 0x6, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2, 0xc, 0x7, 0x3, 0x800, 0x7, 0x9, 0x81]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x18, 0x16, 0x16, 0x5, 0x1, 0x30, 0xc, 0x12, 0x60, 0x48, 0xc, 0x36, 0x30, 0x6c, 0x60, 0x18, 0x1, 0x24, 0x18, 0x36, 0x2, 0xc, 0x0, 0x60, 0x0, 0x4, 0x0, 0x36, 0x2, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xd, 0x1ff, 0x4, 0x0, 0xfc, 0x2]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x0, 0xfb, 0x6e, 0x10, 0x8001, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x48, 0xa, 0x9, 0x12, 0x1b, 0x12, 0x30, 0x1, 0x9, 0x5a, 0x18, 0x2, 0x6c, 0x4, 0x18, 0x24, 0x60, 0x48, 0x4, 0x5, 0x1b, 0x9, 0x37d7febec985c06, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0xa}, {0x4, 0x6}, {0x0, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x7}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x1}, {0x7}, {}, {0x6}, {0x2, 0x8}, {0x1, 0x2}, {0x4, 0x1c}, {0x5, 0x9}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x2, 0x2}, {0x4, 0x3}, {0x6, 0x5}, {0x3, 0x4}, {0x1}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x7}, {}, {0x4, 0x3}, {0x3, 0x9}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0xa}, {0x6, 0x15}, {0x7}, {0x3, 0x8}, {0x5}, {0x5, 0xa}, {0x7, 0x9}, {0x2}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x18, 0x6, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x5, 0xd2, 0x9, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x3, 0x6, 0x4, 0xc, 0x5, 0x2, 0x1b, 0x48, 0x24, 0x48, 0x4, 0x24, 0x9, 0xb, 0x18, 0x30]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0xb, 0x48, 0x5, 0x24, 0x30, 0x16, 0x6c, 0x36, 0xc, 0x36, 0x3, 0x16, 0xd, 0x24, 0xc, 0x2, 0x6c, 0x60, 0x4, 0x1, 0x5, 0x1b, 0x12, 0xb, 0x2]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6}, {0x4, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x48, 0x36, 0x22, 0x3, 0xb, 0x16, 0x6, 0x1b, 0x9, 0x5, 0x3, 0x12, 0x9, 0x5, 0x64, 0x18, 0x4, 0x36, 0x48, 0x12, 0x12, 0x16, 0x60, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x6, 0x4}, {0x6, 0x1}, {0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x3, 0x6}, {0x6, 0x4}, {0x5, 0x6}, {}, {0x7, 0x1}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x9}, {0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x9}, {0x6, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x36, 0x4, 0x24, 0x30, 0x9, 0x1, 0x16, 0x50, 0x24, 0xb, 0x2, 0xb, 0xb, 0x5, 0x1, 0xb, 0x5e, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x8000}, 0x80) executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random='\x00\t\x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0xb, 0xa2, [@multicast2, @broadcast]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) executing program 4: socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x94) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0xb, 0x4, 0x0, 0x4, 0x2c, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "d1620f402ee98f4dc8"}]}]}}}}}}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@mpls_delroute={0x30, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x5, 0x12, {0x29, "498eb9b3372d0000000000004000"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) unshare(0x2c020400) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfe22, &(0x7f0000000040)={0x0}}, 0x0) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7030000ffffff90850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x360}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x360}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) executing program 3: r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={r1, 0x76, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adc"}, &(0x7f0000000180)=0x7e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0), 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000006200)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000de45144887ef1a790000080000002978023f2c6f74b02496f827c66f08e0269618b381abdb5ed317a43d577a80ed0ddb5a8e99931e00"/75], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000e8ff14000100fc00000000000000000000000000000008001700"], 0x38}}, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b", 0x2}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={r6, 0x8}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000c80)=ANY=[@ANYRES64=r2, @ANYRES64=r4, @ANYRES64=r1, @ANYRESOCT=r6, @ANYRESDEC=r3, @ANYRES32=r6], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r8, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r8, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3d8, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0a0800452000c400660a0101010101861500000001050fa7c36a32a1552f5c408b69067807273f", @ANYRES32=0x41424344, @ANYRES32=r9, @ANYBLOB="f00400069078fffefe0bf9897f769eadfe076522020806d7b6339f040213092dec6ebea9ecbf0803a7fe05f989520000d4934eb0ad7daf2d9e32d0bc50ace9553acd6da8d74c1fff7536f33aa7b6eee35a24dc2f9bbdd112446c89c7ee983995e2b4c482"], &(0x7f00000000c0)={0x1, 0x4, [0x594, 0xecf, 0xb98, 0x99b]}) syz_emit_ethernet(0x1f7, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004c3001e9006400000e2f9078ac1414bbe0000001860600000003940400008619000000010002070200020504b83d02099152a1ca9f0c75940400004434af537f000001fffffabae000000100000956640101000000001000000000000000016401010000000002e000000100000004000c20880b00be0002000911075017e65bbd8fa16798efa87268dee4a7195429f61b546c00807a550af2318f9e6f3a5695d8572a55052b77a40b7398e13a87fed01321ea93f4f1e8546b01ca1e18347006741802ce8be1d2522845bed7f9ea9896d9522affb15ccbaae141f8554416c08a89103f877340e6bbe96b29f389ec7bd16ab2d9eb7708616f613f0b2de9f8ced87675746ef033ffc51a286c11d71070dcd3279475067879c9184a00d2a283c6d113485cb2f15ba399abce87089bbf32103672f79900000800090086dd97b9d994ab6111a3f5911637b6d2feaba258adc18e263b79726b74ecff7f68a32b76bd689ecbb0c727615098b86052a90e8ac071b2b93c166ed650daf9f04b99ec691dfdb13a32d6e5e760c550dd9681feef803336b79d07284ef1a52fcd782e6a988cd40f1f61d450ac005d4c3e95308d07c070a0b60a8af0f1c5080088be0000000310f734030100000000000006080022eb0000000021fb41010200000065580000000300000000"], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0xa7) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0x0, 0x2d}, 0xc) epoll_create1(0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1210c0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500005c00660000002f9078ac1e0001e0000001000086dd0048907803000000029a9598e5be2a2129eca8e913620485f399a5b101e20c84f5335e76ca45330a2f58"], 0x6e) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r8, 0x211, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000091400078008001140000000000500150001000000050005000a000000050001000700000005000400000000000900020073797a32000000000c000300686173683a6970"], 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x7c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040) executing program 3: unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)=' \x00'/14, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) executing program 1: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x8880}, 0x20000081) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)={0x250, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x238, 0x1, 0x0, 0x1, [@nested={0x231, 0xf3, 0x0, 0x1, [@generic="4d6162974756486ad90a0246c5165918226c866b5293728dc5ee01e07823881f0c272b3301cc958ee776688d2b276c1c7f5cdf30e827f21e0000000000", @generic="d84197339ff6b45c110d8608efed5ecda66700199f663059790bf6688f93d36b732483bdb5bb894f72b6eae06f786f8d67300e6dc3a68e94c03de804b5022ec0ce1e64a90688f1370683160045d88e5639dac9b0ebe8c2e279975ac66139c7ce4deccc77b1a1132abcf0a7a29653f4ae116386d01894108e92fc36b46902204df866124f6be8b980be6a23f0ffd03ec25b19cf8e64e452bcd366733083878b202cbfdac77e862224bda450f6464399fc9f94095d31524575cbb15efda429b82724fb3849456bb7926f1a63f64a49baef", @nested={0x11d, 0x124, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}}, @nested={0x4, 0x129}, @generic="f843606b009d9195dfd758fb99eb88fdb9550a54d5a93eac5dc73f72fb543e3aea1ed863319115b20a47606d4cb233b189185722931742eb3d11d6740b4fb9c3a69c7ace13db05305db22b5c39239aa6e56bdfe7eb88fc37e47941d6c2aaaf96b1bc0d126557dd4a1d9eb4eef4e0f0675a5d6d83b50dc1736829529309ffdabbe0dcd4ba758e3306695d7196e3de03f52b2ce0c089416c11c0108cd62c57b57d275b98f3bcc474d51aa2c01af2a3aa87e41dd7c0b9032fa24188b2b6fec7abb66a87f3d69697e5adb6d84250d7b0e7f11d3e18e1ae0ee1523796d9e61eee3aac1df605bbc4f17e0c4b67663ffbbba1fbd9d8536eda", @typed={0xc, 0xb9, 0x0, 0x0, @u64=0xfffffffffffffffc}]}]}]}]}, 0x250}}, 0xc000) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0xffffffef}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x40) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, 0x0, 0xc100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x9b, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) (async) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}]}}}]}, 0x40}}, 0x0) executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010001", 0x7) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000300), 0x49249249249259b, 0x840) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x64, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x11}}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}]}]}, 0x64}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000002c0)=0x80000001, 0x4) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}]}, 0x20}, 0x1, 0x7}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, &(0x7f0000000080)="8d64c1933f80e4896ba6ddb7b2629a66005b964fc0c2bef6d3b013482da76b74725000365dfd411c7908ed2454f8b7e8f73df49a44cd8845ed37403af0c0a8a738ec", 0x42, 0x4000000, 0x0, 0x0) executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'macvlan0\x00', @random="8dffffff0600"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000180)}, 0x20) unshare(0xc040480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r11, 0x0, 0x0, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4060800) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x5dc, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c8, 0x1, [@m_police={0x5c4, 0x3fff, 0x0, 0x0, {{0xb}, {0x434, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0xded, 0x0, 0x4, 0xfffffffc, 0x0, 0x2, 0x800, 0x16, 0x8, 0x5, 0x4, 0x3, 0xb, 0x4, 0x4, 0x10, 0xd, 0xb873, 0x4, 0x6, 0x3, 0x7, 0x4, 0x2, 0x7, 0x7, 0x7, 0x3, 0x5, 0x4, 0x80000001, 0x2, 0x6, 0xc97f, 0x68dc, 0xd6, 0x80000001, 0x2, 0xffffffff, 0x4, 0x9, 0x5, 0x101, 0x42bc, 0xe, 0x6, 0x8001, 0x8, 0x800, 0x0, 0x2, 0x3, 0xb45, 0x7, 0x4, 0x40, 0xffffffff, 0x1, 0x5, 0x9, 0x5, 0x10000, 0xfffffffc, 0xb58, 0x7, 0x5, 0x0, 0x10001, 0x8, 0x7fffffff, 0x9, 0x1, 0x0, 0x8480, 0x40, 0x7ff, 0xb92e, 0x1, 0x8, 0xaf0, 0xff000000, 0x1, 0x7, 0x5, 0x2, 0xffffa044, 0x4, 0x8000, 0x7, 0x2, 0x7, 0x88c, 0x8, 0x4, 0x5, 0x15, 0xffffffff, 0x35f, 0x9, 0x1, 0x80000001, 0x8, 0x100, 0x7, 0x4, 0x9, 0x9, 0xe0, 0x3, 0x1000, 0x5, 0x9, 0x7a92, 0x995, 0x0, 0x6, 0x8, 0x9, 0x10001, 0xfffffff9, 0x5, 0xd2, 0x34, 0xc, 0x8001, 0xc, 0xffff, 0x1, 0x8, 0x4, 0x2, 0x4, 0xeb, 0xffff4a3a, 0x2, 0xfffffeff, 0xfffff558, 0x5, 0xffff, 0x7, 0x7ff, 0x8, 0x7f, 0x3, 0xcb, 0x1, 0xfffffffd, 0x6, 0x12, 0x200000, 0xb388, 0x4, 0x800000, 0x6, 0xfffffff9, 0x1, 0x6e3, 0x3, 0x6, 0x100, 0x3, 0xffff, 0x1, 0x401, 0x2, 0x10, 0x806, 0x10, 0x1, 0x3, 0x0, 0x1ff, 0x7, 0x32, 0x724, 0x1, 0x51, 0x401, 0xb24, 0xffffffff, 0x9, 0xa50, 0x8, 0x3, 0xfffffe4a, 0x85fb, 0x81, 0x1, 0x5, 0x7fff, 0x4, 0x8, 0xd, 0x5ae0, 0x2, 0x2b, 0x2, 0x7, 0x8, 0x8, 0x1ff, 0x4, 0x1000, 0x6, 0x1, 0x7, 0x8, 0x5, 0x200, 0x401, 0x3, 0x3, 0x2ffccf5, 0x8, 0x80000000, 0x2, 0x40, 0x10000, 0xed36, 0x400, 0x1, 0x0, 0xf1e2, 0xbee, 0x10001, 0x9, 0x200, 0x4, 0xd, 0x8, 0x1, 0x1, 0x6, 0xb81, 0x1, 0x81, 0x4, 0x1, 0xbbda3e1, 0x8, 0x3, 0x8003, 0x4, 0x80000001, 0x7f, 0x0, 0x1, 0xe, 0x1, 0x80000000, 0x7fffffff, 0x0, 0xc, 0xe1f0]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]]}, {0x165, 0x6, "25e9fb3114fb29134c6d11a61f9088f88297422f375d848af7e01b06cac8709934964581838a4feb8fc3d7a492b9e8a136d2c36ca1e48a8bdf78ba16d1f98eeb5c079482172fb5e6062d1fb375f9d021f986d28aecd7f11ba48251fa550acf5bda50c875f3e960cdb8d149086c14621917896b250000000080000001cc0400c5d5200e498f4e9cd9e3bd47105fae2797cc283fbac3c562b535eea332040df8cf78153c3bfdbcad4e26cf5cb7bcab68595fca217683744c801dcc95317cbf471f65859a5334166ab2f26d18673cb185db2b6bce3c0c7832ee87b18b9429b75da18a71f633abc11aad4c0386f5274395e82e618678d6ae78249fccfdf45fc4f784431f14f3601012c06a7d50b931a449f4f16693744a9df4f87daf2d8981a93724e6ae8853b8823ba8daa537d905347ee3fd6f085649c29cb0daade488526d06665f3b68e2107873654f2a4adb01766fd232d347b5e62884c3d30029d531268b3cbf"}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000036a00010625bd7000fbdbdf250a0000000000000408000a"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) executing program 2: r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={r1, 0xb1, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a"}, &(0x7f0000000180)=0xb9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) executing program 1: r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x3fa, 0x8, "aab9385406e23e3ef07f3a517acb8f927969f94b85d9a03041d2e7306261e662f1375d0f4b61df265c1373100b051feed0825fcc1a65e8a48dc30529c6918e0fb70cf90674149070d779f623af2aabef62b3b29c4760d2d487bccc42280b"}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000080)=""/245, &(0x7f0000000180)=0xf5) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}]}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000280)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r5}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000380)) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f00000003c0)=""/36, &(0x7f0000000400)=0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x2000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x500, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x41, 0x8, "c8b4fde7dd1638db17d1d982831825c1b3867de0309d5da8fe3e50e2057c12d2ef42b4387efae65aa05fd277dfce4b41fb19410b0d90781da6b2eecbf1"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x10c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xdf, 0xc, "3ea7932d67b8ccfdff4659e5e34476513a30e394fda2a39d5fac95e006ee887528be3ed5dc2e39a1b45e14cdbe025484681f8c97d73bc640f1f0350dc8d28b6fd7a4c4ede67833ea3ffc0878a9a88fe842943a9bdf89340ac1400d458aa4c67ac546f1e9d0425c5452c152af3ad6a91fbbd34ee6bc7a9ea42212368752712e64b2f7ed1e6a72464506b2e58159cda33410e3616088a1a83540f0f41d40a56ff0d4f9d4c46661987aa71dfe35aa83d82800104e1745db369b4cf1cec510a9b6a062714cd36a6d59d15ec5f879743ae4111db889f259f19559a3064b"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x118, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x9e, 0xc, "0d815b0b240982ef2e580272c38397f695cf5921fd81025aa8874ab5ce77e952f80e8f43b118626a85c63592b7a5dbdc8d98a15e042b6e15100fcd92d4b447aa1869e14e3c41945982bd8d1ca6aff367cd2c4f7639ed6089ba420a86b2f62d6d40fb50a24b2bebb1be6fa481163a9b23df3ceb719e70b3be979618e6301e23550fe9435954798a4e286d594c6b51dfbd8fe2fa5bb5a7aee19122"}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe6a4b76}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6619e88a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x595bea9e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x330}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) r11 = accept4(r1, &(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000ac0)=0x80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b00)={r7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x90, r10, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000d40)={'virt_wifi0\x00', 0x3}) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000d80)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000dc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r16, 0x50009418, &(0x7f0000000fc0)={{r15}, r17, 0x1e, @unused=[0x80000000, 0x3, 0x5, 0xd832], @devid}) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000001fc0)=r4) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 13, 17, 21, 15, 4, 30, 30, 14, 30] detailed listing: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)={0x250, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x238, 0x1, 0x0, 0x1, [@nested={0x231, 0xf3, 0x0, 0x1, [@generic="4d6162974756486ad90a0246c5165918226c866b5293728dc5ee01e07823881f0c272b3301cc958ee776688d2b276c1c7f5cdf30e827f21e0000000000", @generic="d84197339ff6b45c110d8608efed5ecda66700199f663059790bf6688f93d36b732483bdb5bb894f72b6eae06f786f8d67300e6dc3a68e94c03de804b5022ec0ce1e64a90688f1370683160045d88e5639dac9b0ebe8c2e279975ac66139c7ce4deccc77b1a1132abcf0a7a29653f4ae116386d01894108e92fc36b46902204df866124f6be8b980be6a23f0ffd03ec25b19cf8e64e452bcd366733083878b202cbfdac77e862224bda450f6464399fc9f94095d31524575cbb15efda429b82724fb3849456bb7926f1a63f64a49baef", @nested={0x11d, 0x124, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}}, @nested={0x4, 0x129}, @generic="f843606b009d9195dfd758fb99eb88fdb9550a54d5a93eac5dc73f72fb543e3aea1ed863319115b20a47606d4cb233b189185722931742eb3d11d6740b4fb9c3a69c7ace13db05305db22b5c39239aa6e56bdfe7eb88fc37e47941d6c2aaaf96b1bc0d126557dd4a1d9eb4eef4e0f0675a5d6d83b50dc1736829529309ffdabbe0dcd4ba758e3306695d7196e3de03f52b2ce0c089416c11c0108cd62c57b57d275b98f3bcc474d51aa2c01af2a3aa87e41dd7c0b9032fa24188b2b6fec7abb66a87f3d69697e5adb6d84250d7b0e7f11d3e18e1ae0ee1523796d9e61eee3aac1df605bbc4f17e0c4b67663ffbbba1fbd9d8536eda", @typed={0xc, 0xb9, 0x0, 0x0, @u64=0xfffffffffffffffc}]}]}]}]}, 0x250}}, 0xc000) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0xffffffef}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x40) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, 0x0, 0xc100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x9b, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) (async) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}]}}}]}, 0x40}}, 0x0) executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010001", 0x7) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000300), 0x49249249249259b, 0x840) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x64, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x11}}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}]}]}, 0x64}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000002c0)=0x80000001, 0x4) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}]}, 0x20}, 0x1, 0x7}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, &(0x7f0000000080)="8d64c1933f80e4896ba6ddb7b2629a66005b964fc0c2bef6d3b013482da76b74725000365dfd411c7908ed2454f8b7e8f73df49a44cd8845ed37403af0c0a8a738ec", 0x42, 0x4000000, 0x0, 0x0) executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'macvlan0\x00', @random="8dffffff0600"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000180)}, 0x20) unshare(0xc040480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r11, 0x0, 0x0, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4060800) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x5dc, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c8, 0x1, [@m_police={0x5c4, 0x3fff, 0x0, 0x0, {{0xb}, {0x434, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0xded, 0x0, 0x4, 0xfffffffc, 0x0, 0x2, 0x800, 0x16, 0x8, 0x5, 0x4, 0x3, 0xb, 0x4, 0x4, 0x10, 0xd, 0xb873, 0x4, 0x6, 0x3, 0x7, 0x4, 0x2, 0x7, 0x7, 0x7, 0x3, 0x5, 0x4, 0x80000001, 0x2, 0x6, 0xc97f, 0x68dc, 0xd6, 0x80000001, 0x2, 0xffffffff, 0x4, 0x9, 0x5, 0x101, 0x42bc, 0xe, 0x6, 0x8001, 0x8, 0x800, 0x0, 0x2, 0x3, 0xb45, 0x7, 0x4, 0x40, 0xffffffff, 0x1, 0x5, 0x9, 0x5, 0x10000, 0xfffffffc, 0xb58, 0x7, 0x5, 0x0, 0x10001, 0x8, 0x7fffffff, 0x9, 0x1, 0x0, 0x8480, 0x40, 0x7ff, 0xb92e, 0x1, 0x8, 0xaf0, 0xff000000, 0x1, 0x7, 0x5, 0x2, 0xffffa044, 0x4, 0x8000, 0x7, 0x2, 0x7, 0x88c, 0x8, 0x4, 0x5, 0x15, 0xffffffff, 0x35f, 0x9, 0x1, 0x80000001, 0x8, 0x100, 0x7, 0x4, 0x9, 0x9, 0xe0, 0x3, 0x1000, 0x5, 0x9, 0x7a92, 0x995, 0x0, 0x6, 0x8, 0x9, 0x10001, 0xfffffff9, 0x5, 0xd2, 0x34, 0xc, 0x8001, 0xc, 0xffff, 0x1, 0x8, 0x4, 0x2, 0x4, 0xeb, 0xffff4a3a, 0x2, 0xfffffeff, 0xfffff558, 0x5, 0xffff, 0x7, 0x7ff, 0x8, 0x7f, 0x3, 0xcb, 0x1, 0xfffffffd, 0x6, 0x12, 0x200000, 0xb388, 0x4, 0x800000, 0x6, 0xfffffff9, 0x1, 0x6e3, 0x3, 0x6, 0x100, 0x3, 0xffff, 0x1, 0x401, 0x2, 0x10, 0x806, 0x10, 0x1, 0x3, 0x0, 0x1ff, 0x7, 0x32, 0x724, 0x1, 0x51, 0x401, 0xb24, 0xffffffff, 0x9, 0xa50, 0x8, 0x3, 0xfffffe4a, 0x85fb, 0x81, 0x1, 0x5, 0x7fff, 0x4, 0x8, 0xd, 0x5ae0, 0x2, 0x2b, 0x2, 0x7, 0x8, 0x8, 0x1ff, 0x4, 0x1000, 0x6, 0x1, 0x7, 0x8, 0x5, 0x200, 0x401, 0x3, 0x3, 0x2ffccf5, 0x8, 0x80000000, 0x2, 0x40, 0x10000, 0xed36, 0x400, 0x1, 0x0, 0xf1e2, 0xbee, 0x10001, 0x9, 0x200, 0x4, 0xd, 0x8, 0x1, 0x1, 0x6, 0xb81, 0x1, 0x81, 0x4, 0x1, 0xbbda3e1, 0x8, 0x3, 0x8003, 0x4, 0x80000001, 0x7f, 0x0, 0x1, 0xe, 0x1, 0x80000000, 0x7fffffff, 0x0, 0xc, 0xe1f0]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]]}, {0x165, 0x6, "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"}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000036a00010625bd7000fbdbdf250a0000000000000408000a"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) executing program 2: r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={r1, 0xb1, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a"}, &(0x7f0000000180)=0xb9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) executing program 1: r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x3fa, 0x8, "aab9385406e23e3ef07f3a517acb8f927969f94b85d9a03041d2e7306261e662f1375d0f4b61df265c1373100b051feed0825fcc1a65e8a48dc30529c6918e0fb70cf90674149070d779f623af2aabef62b3b29c4760d2d487bccc42280b"}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000080)=""/245, &(0x7f0000000180)=0xf5) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}]}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000280)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r5}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000380)) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f00000003c0)=""/36, &(0x7f0000000400)=0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x2000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x500, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x41, 0x8, "c8b4fde7dd1638db17d1d982831825c1b3867de0309d5da8fe3e50e2057c12d2ef42b4387efae65aa05fd277dfce4b41fb19410b0d90781da6b2eecbf1"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x10c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xdf, 0xc, "3ea7932d67b8ccfdff4659e5e34476513a30e394fda2a39d5fac95e006ee887528be3ed5dc2e39a1b45e14cdbe025484681f8c97d73bc640f1f0350dc8d28b6fd7a4c4ede67833ea3ffc0878a9a88fe842943a9bdf89340ac1400d458aa4c67ac546f1e9d0425c5452c152af3ad6a91fbbd34ee6bc7a9ea42212368752712e64b2f7ed1e6a72464506b2e58159cda33410e3616088a1a83540f0f41d40a56ff0d4f9d4c46661987aa71dfe35aa83d82800104e1745db369b4cf1cec510a9b6a062714cd36a6d59d15ec5f879743ae4111db889f259f19559a3064b"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x118, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x9e, 0xc, "0d815b0b240982ef2e580272c38397f695cf5921fd81025aa8874ab5ce77e952f80e8f43b118626a85c63592b7a5dbdc8d98a15e042b6e15100fcd92d4b447aa1869e14e3c41945982bd8d1ca6aff367cd2c4f7639ed6089ba420a86b2f62d6d40fb50a24b2bebb1be6fa481163a9b23df3ceb719e70b3be979618e6301e23550fe9435954798a4e286d594c6b51dfbd8fe2fa5bb5a7aee19122"}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe6a4b76}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6619e88a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x595bea9e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x330}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) r11 = accept4(r1, &(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000ac0)=0x80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b00)={r7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x90, r10, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000d40)={'virt_wifi0\x00', 0x3}) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000d80)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000dc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r16, 0x50009418, &(0x7f0000000fc0)={{r15}, r17, 0x1e, @unused=[0x80000000, 0x3, 0x5, 0xd832], @devid}) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000001fc0)=r4) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL-sendmsg$NL80211_CMD_RELOAD_REGDB-sendmsg$NL80211_CMD_SET_INTERFACE-sendmsg$kcm detailed listing: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp bisect: the chunk can be dropped bisect: 1 programs left: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL-sendmsg$NL80211_CMD_RELOAD_REGDB-sendmsg$NL80211_CMD_SET_INTERFACE-sendmsg$kcm detailed listing: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp bisect: concatenation succeeded found reproducer with 30 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL-sendmsg$NL80211_CMD_RELOAD_REGDB-sendmsg$NL80211_CMD_SET_INTERFACE detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x0) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL-sendmsg$NL80211_CMD_RELOAD_REGDB detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10008000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211 detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic-socket$nl_generic detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM-socket$nl_generic detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-socket$nl_netfilter detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-sendmsg$NFT_BATCH-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x26, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$PROG_LOAD-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be0000000000950000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r3) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-close-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-syz_init_net_socket$bt_hci-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-socket$kcm-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-setsockopt$packet_tx_ring-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-socket-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-close-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-socket$nl_netfilter-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp simplifying C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program did not crash testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program did not crash testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-close-socket$nl_netfilter-setsockopt$packet_tx_ring-recvmsg$unix-sendmmsg-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-socket$nl_netfilter-sendmsg$NFT_MSG_GETSETELEM detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000000001140000001100010b"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) program crashed: KASAN: slab-use-after-free Read in nft_array_get_cmp validation run: crashed=true reproducing took 1h38m25.452667085s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in nft_set_ext include/net/netfilter/nf_tables.h:795 [inline] BUG: KASAN: slab-use-after-free in nft_set_ext_key include/net/netfilter/nf_tables.h:800 [inline] BUG: KASAN: slab-use-after-free in nft_array_get_cmp+0x1f6/0x2a0 net/netfilter/nft_set_rbtree.c:133 Read of size 1 at addr ffff88807e414199 by task syz.4.226/6294 CPU: 0 UID: 0 PID: 6294 Comm: syz.4.226 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xba/0x230 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 nft_set_ext include/net/netfilter/nf_tables.h:795 [inline] nft_set_ext_key include/net/netfilter/nf_tables.h:800 [inline] nft_array_get_cmp+0x1f6/0x2a0 net/netfilter/nft_set_rbtree.c:133 __inline_bsearch include/linux/bsearch.h:15 [inline] bsearch+0x50/0xc0 lib/bsearch.c:33 nft_rbtree_get+0x16b/0x400 net/netfilter/nft_set_rbtree.c:169 nft_setelem_get net/netfilter/nf_tables_api.c:6495 [inline] nft_get_set_elem+0x420/0xaa0 net/netfilter/nf_tables_api.c:6543 nf_tables_getsetelem+0x448/0x5e0 net/netfilter/nf_tables_api.c:6632 nfnetlink_rcv_msg+0x8ae/0x12c0 net/netfilter/nfnetlink.c:290 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 nfnetlink_rcv+0x2c0/0x27b0 net/netfilter/nfnetlink.c:669 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2681 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f436119aeb9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd04dcaf58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f4361415fa0 RCX: 00007f436119aeb9 RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 RBP: 00007f4361208c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f4361415fac R14: 00007f4361415fa0 R15: 00007f4361415fa0 Allocated by task 6294: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5657 [inline] __kmalloc_noprof+0x40c/0x7e0 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] nft_set_elem_init+0xa8/0x7e0 net/netfilter/nf_tables_api.c:6811 nft_add_set_elem net/netfilter/nf_tables_api.c:7547 [inline] nf_tables_newsetelem+0x22a4/0x4360 net/netfilter/nf_tables_api.c:7717 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:526 [inline] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:649 [inline] nfnetlink_rcv+0x1240/0x27b0 net/netfilter/nfnetlink.c:667 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2681 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 6294: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6674 [inline] kfree+0x1be/0x650 mm/slub.c:6882 nf_tables_set_elem_destroy net/netfilter/nf_tables_api.c:6930 [inline] nft_trans_gc_trans_free+0x519/0x6c0 net/netfilter/nf_tables_api.c:10542 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core+0xc9e/0x1750 kernel/rcu/tree.c:2857 handle_softirqs+0x22a/0x7c0 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 lock_sock include/net/sock.h:1700 [inline] netlink_insert+0xce/0x1360 net/netlink/af_netlink.c:557 netlink_autobind+0x22d/0x300 net/netlink/af_netlink.c:826 netlink_sendmsg+0x531/0xb40 net/netlink/af_netlink.c:1857 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2681 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff88807e414180 which belongs to the cache kmalloc-cg-64 of size 64 The buggy address is located 25 bytes inside of freed 64-byte region [ffff88807e414180, ffff88807e4141c0) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e414 memcg:ffff88802aa2a201 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000000 ffff88813fe2ec80 dead000000000122 0000000000000000 raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88802aa2a201 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6290, tgid 6290 (syz.3.222), ts 109687441268, free_ts 109634427768 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x228/0x280 mm/page_alloc.c:1884 prep_new_page mm/page_alloc.c:1892 [inline] get_page_from_freelist+0x24dc/0x2580 mm/page_alloc.c:3945 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5240 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2486 alloc_slab_page mm/slub.c:3075 [inline] allocate_slab+0x86/0x3a0 mm/slub.c:3248 new_slab mm/slub.c:3302 [inline] ___slab_alloc+0xd82/0x1760 mm/slub.c:4656 __slab_alloc+0x65/0x100 mm/slub.c:4779 __slab_alloc_node mm/slub.c:4855 [inline] slab_alloc_node mm/slub.c:5251 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x46c/0x7e0 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] nft_set_elem_init+0xa8/0x7e0 net/netfilter/nf_tables_api.c:6811 nft_add_set_elem net/netfilter/nf_tables_api.c:7547 [inline] nf_tables_newsetelem+0x22a4/0x4360 net/netfilter/nf_tables_api.c:7717 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:526 [inline] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:649 [inline] nfnetlink_rcv+0x1240/0x27b0 net/netfilter/nfnetlink.c:667 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2681 page last free pid 5199 tgid 5199 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1433 [inline] __free_frozen_pages+0xbf8/0xd70 mm/page_alloc.c:2973 __tlb_remove_table_free mm/mmu_gather.c:228 [inline] tlb_remove_table_rcu+0x85/0x100 mm/mmu_gather.c:291 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core+0xc9e/0x1750 kernel/rcu/tree.c:2857 handle_softirqs+0x22a/0x7c0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x5f/0x150 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 Memory state around the buggy address: ffff88807e414080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ffff88807e414100: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc >ffff88807e414180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ^ ffff88807e414200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc ffff88807e414280: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in nft_set_ext include/net/netfilter/nf_tables.h:795 [inline] BUG: KASAN: slab-use-after-free in nft_set_ext_key include/net/netfilter/nf_tables.h:800 [inline] BUG: KASAN: slab-use-after-free in nft_array_get_cmp+0x1f6/0x2a0 net/netfilter/nft_set_rbtree.c:133 Read of size 1 at addr ffff88807e414199 by task syz.4.226/6294 CPU: 0 UID: 0 PID: 6294 Comm: syz.4.226 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xba/0x230 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 nft_set_ext include/net/netfilter/nf_tables.h:795 [inline] nft_set_ext_key include/net/netfilter/nf_tables.h:800 [inline] nft_array_get_cmp+0x1f6/0x2a0 net/netfilter/nft_set_rbtree.c:133 __inline_bsearch include/linux/bsearch.h:15 [inline] bsearch+0x50/0xc0 lib/bsearch.c:33 nft_rbtree_get+0x16b/0x400 net/netfilter/nft_set_rbtree.c:169 nft_setelem_get net/netfilter/nf_tables_api.c:6495 [inline] nft_get_set_elem+0x420/0xaa0 net/netfilter/nf_tables_api.c:6543 nf_tables_getsetelem+0x448/0x5e0 net/netfilter/nf_tables_api.c:6632 nfnetlink_rcv_msg+0x8ae/0x12c0 net/netfilter/nfnetlink.c:290 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550 nfnetlink_rcv+0x2c0/0x27b0 net/netfilter/nfnetlink.c:669 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2681 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f436119aeb9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd04dcaf58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f4361415fa0 RCX: 00007f436119aeb9 RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 RBP: 00007f4361208c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f4361415fac R14: 00007f4361415fa0 R15: 00007f4361415fa0 Allocated by task 6294: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5657 [inline] __kmalloc_noprof+0x40c/0x7e0 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] nft_set_elem_init+0xa8/0x7e0 net/netfilter/nf_tables_api.c:6811 nft_add_set_elem net/netfilter/nf_tables_api.c:7547 [inline] nf_tables_newsetelem+0x22a4/0x4360 net/netfilter/nf_tables_api.c:7717 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:526 [inline] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:649 [inline] nfnetlink_rcv+0x1240/0x27b0 net/netfilter/nfnetlink.c:667 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2681 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 6294: kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6674 [inline] kfree+0x1be/0x650 mm/slub.c:6882 nf_tables_set_elem_destroy net/netfilter/nf_tables_api.c:6930 [inline] nft_trans_gc_trans_free+0x519/0x6c0 net/netfilter/nf_tables_api.c:10542 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core+0xc9e/0x1750 kernel/rcu/tree.c:2857 handle_softirqs+0x22a/0x7c0 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 lock_sock include/net/sock.h:1700 [inline] netlink_insert+0xce/0x1360 net/netlink/af_netlink.c:557 netlink_autobind+0x22d/0x300 net/netlink/af_netlink.c:826 netlink_sendmsg+0x531/0xb40 net/netlink/af_netlink.c:1857 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2681 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff88807e414180 which belongs to the cache kmalloc-cg-64 of size 64 The buggy address is located 25 bytes inside of freed 64-byte region [ffff88807e414180, ffff88807e4141c0) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e414 memcg:ffff88802aa2a201 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000000 ffff88813fe2ec80 dead000000000122 0000000000000000 raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88802aa2a201 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6290, tgid 6290 (syz.3.222), ts 109687441268, free_ts 109634427768 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x228/0x280 mm/page_alloc.c:1884 prep_new_page mm/page_alloc.c:1892 [inline] get_page_from_freelist+0x24dc/0x2580 mm/page_alloc.c:3945 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5240 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2486 alloc_slab_page mm/slub.c:3075 [inline] allocate_slab+0x86/0x3a0 mm/slub.c:3248 new_slab mm/slub.c:3302 [inline] ___slab_alloc+0xd82/0x1760 mm/slub.c:4656 __slab_alloc+0x65/0x100 mm/slub.c:4779 __slab_alloc_node mm/slub.c:4855 [inline] slab_alloc_node mm/slub.c:5251 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x46c/0x7e0 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] nft_set_elem_init+0xa8/0x7e0 net/netfilter/nf_tables_api.c:6811 nft_add_set_elem net/netfilter/nf_tables_api.c:7547 [inline] nf_tables_newsetelem+0x22a4/0x4360 net/netfilter/nf_tables_api.c:7717 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:526 [inline] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:649 [inline] nfnetlink_rcv+0x1240/0x27b0 net/netfilter/nfnetlink.c:667 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa68/0xad0 net/socket.c:2592 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2646 __sys_sendmsg net/socket.c:2678 [inline] __do_sys_sendmsg net/socket.c:2683 [inline] __se_sys_sendmsg net/socket.c:2681 [inline] __x64_sys_sendmsg+0x1bd/0x2a0 net/socket.c:2681 page last free pid 5199 tgid 5199 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1433 [inline] __free_frozen_pages+0xbf8/0xd70 mm/page_alloc.c:2973 __tlb_remove_table_free mm/mmu_gather.c:228 [inline] tlb_remove_table_rcu+0x85/0x100 mm/mmu_gather.c:291 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core+0xc9e/0x1750 kernel/rcu/tree.c:2857 handle_softirqs+0x22a/0x7c0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x5f/0x150 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 Memory state around the buggy address: ffff88807e414080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ffff88807e414100: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc >ffff88807e414180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ^ ffff88807e414200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc ffff88807e414280: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc ==================================================================