Extracting prog: 6m33.032791836s
Minimizing prog: 2h30m33.238001149s
Simplifying prog options: 0s
Extracting C: 44.875595057s
Simplifying C: 26m33.392330875s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$nl_route-socket$nl_route-sendmsg$nl_route-sendmmsg$inet
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000005200)=[{}], 0x1, 0x404c080)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30, 30, 25, 30, 14, 25, 30, 29, 4, 22, 18, 30, 30, 29, 10, 30, 14, 11, 4, 7, 22, 10, 30, 8, 17, 3, 30, 5, 33]
detailed listing:
executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xc, @sctp_ip6_spec={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x8, 0x7}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@local, @private=0xa010101, 0x0, 0x5}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x6, 0x5, [0x6, 0x6]}, 0xff, 0xffffffff}}})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
unshare(0x2a000000)
unshare(0x2c020400)
socket(0x40000000015, 0x5, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, 0x0, 0x20000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r9)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x32f4, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_matchall={{0xd}, {0x32c0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x1bc, 0x2, [@m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0xfffffffc, 0x0, 0x6, 0xd19}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x5a2baf12e607b388}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x168, 0x2, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x800, 0x8, 0xfffffffd, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7dff, 0x37, 0xffffffffffffffff, 0x2d, 0x5}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x793b, 0x10000000, 0x8, 0x800}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x2, 0x20000000, 0x17, 0x4}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x9, 0x1, 0xb5, 0xfffffffd}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9346, 0x20000000, 0x7fffffff, 0x5}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0xffffffffffffffff, 0x2, 0xf4}, 0x1, r10}}]}, {0x5c, 0x6, "3fbf4c6e2498aaf553b9b5311f481cff81f5c01690d44b9d517b2d52ef4475664cd342449e7320f1ad35d49fbdbb9450dd2e532646ef3ae7b522ddbf4b1f9bd457fd01bf9d2f37752fda5f0aecf631dbb5916fecccb11959"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x30e8, 0x2, [@m_csum={0xec, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffd, 0x3, 0x3, 0x4}, 0x1}}]}, {0xa1, 0x6, "4ebe3439bae72854f2072e4675201177c48516f90a8a58cc1b5308b90cd0a931ebee8a2b637418247153f577f8fbefe018fbc2d679ef2d4356a07f3500de0febef409f8299fc79e6c39a7c87f103ee4050839a658db79dc34336eb787074be7561354fa3e66e1c7328c46d13362fac3650d6f3dbde0fe723e0d77bf312dc4290cfe462e37c13ce0f23484858b6f6b7c1e2e26b353f3dfa2d9fc1cdf348"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0xac, 0xc, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x8, 0x5, 0x3}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}]}, {0x5c, 0x6, "201fb412a8f7e16c6d6a8b54fbd1c7977fbed1db91fac0f525d37ebaeb4ed505ee2670591654161b02bc0341f3967e50e45407ff3161afbdfca45ec0037069a89c89addec7763dc4e4bfcd61d9c04b12571ca59f1a3ff2e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1e80, 0x14, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x1, 0xe1a, 0x5, 0x9, 0x400}, 0x1, 0xb0, [{0xffffffff, 0x100, 0x5, 0x9, 0x7, 0x5}, {0x7, 0x7, 0x1e6d, 0x7f, 0x8, 0x10000}]}, [{0x69, 0xcfc9, 0x6, 0x0, 0x80, 0x7}, {0xfffffff5, 0x9, 0x3, 0x9a85, 0x28000000}, {0xe, 0xfffffff7, 0x5b5, 0x8, 0x10, 0xc}, {0x10000, 0x8001, 0xffffffff, 0x60, 0x40, 0x7}, {0x1, 0x7, 0x8, 0x0, 0x0, 0x8}, {0x7, 0x6, 0x5, 0x9, 0x80, 0x2000000}, {0x10000, 0xffff, 0x3, 0x6, 0x2000005, 0x46d1}, {0xa, 0x1, 0x6, 0xc8, 0x1, 0x80}, {0x10001, 0x43, 0xcc, 0x101, 0x7, 0x9b0}, {0x100, 0x1d70, 0x9, 0x2, 0x3}, {0xd6, 0x101, 0x4, 0x2, 0x2, 0x8}, {0x1ff, 0x9, 0xffffa068, 0x271, 0x7, 0xf0}, {0x9, 0x3, 0x5, 0x5, 0x8001, 0x200}, {0x3, 0xffffffff, 0x1, 0x5961, 0x8, 0xff0b}, {0x2, 0xfc, 0x5, 0xbd, 0x6, 0x6}, {0x8, 0x6620e996, 0x1, 0x1, 0x3, 0xfffffff8}, {0x47c, 0x800, 0xcb5b, 0x5, 0x2281, 0x9}, {0x1, 0x401, 0xdf53, 0x8, 0xfffffff8, 0x7}, {0x9, 0x768, 0x5, 0x2, 0x5, 0xffff}, {0x0, 0x5, 0x3, 0xf4, 0x80000000, 0x5}, {0x9, 0x3, 0x9, 0xdb2, 0xeaa}, {0x4, 0x10, 0x9, 0x3, 0x6, 0xfe8}, {0x9, 0x8, 0xffffffff, 0xfffffffe, 0x70, 0xdf}, {0x90d0, 0xff, 0x0, 0x3, 0x2}, {0xfffffff1, 0x80000000, 0x5, 0x3ff, 0xf993, 0xe}, {0x8, 0x10001, 0x1ff, 0x2, 0x9, 0x7}, {0xffffffff, 0x6b11b728, 0x7, 0x80000001, 0x4, 0x5}, {0x4, 0x89267de, 0x8, 0x9, 0x8, 0x5}, {0x8, 0x9b, 0x4, 0x3, 0x80000000, 0xffff}, {0x6, 0x5, 0x81, 0x6, 0x5, 0x5b732c34}, {0x7f0000, 0x4, 0x0, 0x10000, 0xb2, 0xf3f6}, {0x8001, 0x4, 0x5, 0x1ff, 0xf872, 0x101}, {0xfffffffb, 0x81, 0x8, 0x4, 0x3, 0x4}, {0x80000001, 0x4, 0xd, 0x0, 0x2, 0x80000000}, {0x7, 0xca01, 0x0, 0x7, 0x4}, {0x101, 0x6b2, 0x6, 0xffffeb9c, 0x400, 0x10000000}, {0x3, 0xed, 0x8, 0x6, 0x9, 0x43}, {0x7500, 0x0, 0x9, 0xfffffd36, 0x2, 0xfffffffc}, {0x3, 0x9, 0xf942, 0x9, 0x7fff}, {0x9, 0x4, 0x7d, 0x1, 0x6, 0x6}, {0x8, 0x0, 0x80000000, 0xf507, 0x5, 0x5}, {0xff, 0x8, 0x2, 0x3, 0x3, 0x10}, {0x2, 0x8, 0x0, 0x5, 0x80000001, 0xfffffff1}, {0x3ccb, 0x7, 0x7ff, 0x80, 0x7, 0x4}, {0x7ff, 0x5, 0xd, 0x8000, 0x2, 0xffff}, {0x6, 0xc, 0x7, 0x1ff, 0x20000000, 0x1}, {0x9, 0x3ff, 0x5, 0x5000000, 0xcc3, 0x7}, {0x95a4, 0xfff, 0xfffffffd, 0x2, 0x4, 0x5b2}, {0x6, 0x10000, 0xf61d, 0x7, 0xfffffffa, 0x936}, {0x2, 0x2, 0x80, 0x3, 0x10000000, 0x726}, {0x3, 0x2, 0xb1, 0x4, 0x8, 0xcb89}, {0xc, 0x1, 0x2, 0x7, 0x3ff, 0x80000001}, {0x8, 0x80000001, 0x10, 0x8000, 0x100}, {0xff, 0x0, 0x9a98, 0x5, 0x0, 0x1}, {0x1000, 0x2, 0x9, 0x5, 0x9, 0x7}, {0x2, 0xfffffff7, 0x8, 0x0, 0xffffffff, 0x6}, {0x40, 0x100, 0x7c7e5016, 0x8, 0x6, 0x9}, {0x7, 0x5, 0x8000, 0x3, 0xc, 0x1}, {0x10001, 0x7, 0x8, 0x4, 0x4d, 0xd}, {0xb1, 0x4, 0x403, 0x2, 0xffff, 0x8}, {0x1, 0x40, 0x6, 0x81, 0x9, 0x14}, {0x0, 0x0, 0x100, 0xc246, 0x80, 0x2}, {0x3, 0x5, 0x0, 0x4, 0x3, 0x85}, {0x7ff, 0x65, 0xe2e3, 0x80000001, 0x6, 0x9}, {0x3, 0x2, 0xfffffffb, 0x9, 0x9, 0x2}, {0x8, 0x8d9, 0x8, 0x2, 0x0, 0xa608}, {0x8, 0x2e1, 0x6, 0x682, 0xfffffffc, 0x3ff}, {0x4, 0x3, 0x4, 0x401, 0x0, 0xb}, {0x100, 0x7, 0x30b1, 0x7, 0x5, 0x4}, {0x7, 0x7d6, 0x8, 0xb0e5, 0x128, 0x2}, {0x8, 0xfffffb8a, 0xffffffff, 0x8, 0x7ff, 0x3}, {0x7, 0x8, 0x2, 0x2, 0x2, 0x1ff}, {0x3, 0x40, 0x2, 0x90000, 0x8, 0x6}, {0x6, 0x89, 0x0, 0x10, 0xd8, 0x3}, {0x7, 0x9d9, 0x27afa964, 0x0, 0x800}, {0x1, 0x433a, 0xff, 0x3, 0xec, 0x9}, {0xfa, 0x0, 0x4, 0xb, 0x1000, 0x1}, {0x5, 0x8, 0xfffff1ad, 0x8, 0x9, 0x74}, {0x2, 0x4, 0x0, 0x0, 0x2, 0x40}, {0xb0e, 0xffe, 0x3, 0x7ff, 0x81, 0x7fffffff}, {0x8001, 0xfffffff0, 0x7, 0xa, 0x6, 0x2}, {0x63d6, 0x6, 0x2db8, 0xf, 0xffffffff, 0x1}, {0x4, 0x7, 0x0, 0x4, 0x3ff, 0x2}, {0x7, 0x200, 0x6a8, 0x6, 0x7, 0x1}, {0x3, 0x2, 0x8, 0x46, 0x6, 0xd}, {0xb, 0x4, 0x5d67, 0x0, 0x80000000, 0x8}, {0x4, 0xd8, 0xffffffff, 0x6, 0x6}, {0x4, 0x100000, 0x4, 0x4, 0x8}, {0x6b88, 0x9, 0x1c, 0x0, 0x8, 0x4}, {0x8f, 0x9, 0xf15, 0x1, 0x7, 0x6}, {0x2, 0x9, 0x2, 0x1, 0xfffffffb, 0x8}, {0x1, 0x0, 0x7, 0x4, 0xb, 0x3}, {0x3, 0xdb, 0x5, 0x5, 0x1, 0x8}, {0x3, 0x6f3b, 0x4, 0x6, 0x9, 0xf}, {0x80, 0xffff8000, 0x7fffffff, 0x8, 0x8, 0x3}, {0x7, 0x1, 0x6, 0x4, 0x7ff, 0x4}, {0x3, 0x0, 0x6b, 0x7, 0x1ff, 0x8000}, {0x9, 0xc31, 0x5, 0x7, 0x6e, 0x8}, {0x8, 0x3218, 0x800, 0x8, 0x2, 0x4}, {0x7f, 0x0, 0x1, 0x10, 0xc8}, {0x8, 0x5de, 0x4c1a, 0xfffffc01, 0x1ff, 0xffffffff}, {0x8, 0x3, 0x6, 0x6, 0x7}, {0x9, 0x1, 0x8, 0x6, 0xb, 0x4}, {0x7, 0x1ff, 0x5e, 0xb2, 0x2, 0x5}, {0x8, 0x1, 0x4, 0x82, 0x5, 0x1000}, {0xa, 0x45, 0x80000000, 0x400, 0x8, 0x1}, {0x6, 0xd77e, 0x1, 0x3, 0x0, 0x1}, {0x8, 0x4, 0x6, 0x3f, 0x95ea, 0xfff}, {0x3, 0x3ff, 0x5, 0x3, 0x1fb1, 0x2}, {0x1, 0x1505, 0x80000001, 0xb, 0x10, 0x7}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x362d}, {0xe8, 0x5, 0x5, 0xfffffff7, 0x4, 0x3}, {0x7, 0xb, 0x7, 0xb, 0x4, 0xe}, {0x9, 0x1, 0x5, 0x6, 0x0, 0x4}, {0x8, 0xfffffff4, 0x0, 0x7, 0x1, 0x5940886c}, {0x9, 0x6, 0x7fd, 0x3, 0x40, 0x7}, {0x5, 0x0, 0x0, 0x5, 0x3, 0x3}, {0x8, 0x3, 0x7f, 0x10, 0x8, 0x1}, {0x9, 0x4, 0x6681, 0x1000000, 0x2, 0x1}, {0x1, 0xd, 0x4, 0x8, 0x8, 0x3}, {0x10000, 0x4, 0x7f, 0x3, 0xf9d6}, {0x81, 0x6, 0xff, 0x8001, 0x4, 0x9}, {0x9, 0x3, 0x7, 0x9, 0x7ff, 0x6}, {0x6, 0x80000001, 0x200, 0x7, 0x6, 0x6}, {0x0, 0x5, 0x7894, 0xca71, 0x0, 0x7fffffff}, {0x5, 0x2, 0x3, 0x1, 0x6, 0x100}, {0xc12, 0x4, 0x9, 0x8, 0x8001, 0xffffffff}, {0x3, 0x2, 0x6, 0x180000, 0x65, 0x40}], [{0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3fde14c993ca43, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x2}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x1, 0xbc330e5ef95b81d9}, {0x2, 0x1}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0xf67f9cbb981efd79, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x6}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x6, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x2}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x50668261ce12495d}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x90ce3f1f88c8e9ed}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0xe66d569caf822f62}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x5}], 0x20}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_connmark={0x10c, 0x11, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x7, 0x0, 0xfffffeff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffcac5, 0x9, 0xffffffffffffffff, 0xfffffc00, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x8, 0x8, 0x2, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0x2, 0xcb, 0xbb5}, 0x4c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0xf, 0x0, 0x7, 0x4}, 0x50}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xa, 0x4, 0x7, 0x9}, 0x3}}]}, {0x31, 0x6, "68b9e302736c50e2fcd44fe3e4cf1cd9e26f4fe1b2ca55b6592597febb13452a0420b645f3ee5bb26ddd1a015f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xc8, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x184, 0x4, 0x7be1a7af, 0x6}}]}, {0x82, 0x6, "3a297a2cdfc8e8bbe06ff2e3028afcf5849914ec6fd9d1b4f948587967cf27e02d78eaad88478465d5a8960fe7cdfbe44a132c0404010123ed729d40f0bf2bc9b2d5209748a86f5781b009fa72a8889aebf01edd9fcfc9ed0cc84159962ed7dbbf7e42a9a087b75b679dfbdbb5295fe413ad61f2cac752404939b68983b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0xef8, 0x4, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x7, 0xfb42, 0x5, 0x7, 0x9}, 0xc, 0xa, [{0x9, 0x0, 0x3, 0x7d3, 0x9, 0x10001}, {0x7, 0xd, 0x3, 0x2, 0x14, 0xfffffff7}, {0x1, 0x4, 0x7, 0x6}, {0x6, 0x5, 0x7, 0xfffffffc, 0x7, 0x3}]}, [{0x0, 0x1, 0x6, 0x7, 0x7, 0xe}, {0xffffffff, 0x7, 0x9, 0x0, 0x182d, 0x7}, {0x67, 0x8, 0x23, 0x690, 0x0, 0xb}, {0x0, 0x3, 0xb, 0xccaa, 0x3, 0x2}, {0x3, 0x5, 0x5, 0x8, 0x7, 0x9}, {0x1000, 0x1, 0x9, 0x4406, 0x400, 0x10001}, {0xc, 0x400, 0x0, 0x897, 0x6, 0x71d}, {0x78, 0xa2, 0xd, 0x400, 0xb, 0x5}, {0x7b, 0x3, 0x0, 0x9, 0x20, 0x3}, {0x9, 0x2, 0x1, 0x2, 0x4, 0x7b}, {0x6, 0x9, 0x2, 0xffffff7c, 0x41a, 0x9}, {0xffffbf0c, 0x1, 0x1, 0xa2, 0x5, 0x3e}, {0x4, 0x1, 0x5c2, 0x5, 0x3, 0x650}, {0x3, 0x401, 0x1, 0x6, 0x7f, 0x8}, {0x9, 0xa, 0xf, 0x2, 0x4, 0x8}, {0x5, 0x0, 0x4c23, 0x5, 0xb80, 0x6}, {0x1ff, 0xe, 0x54, 0xffffffc0, 0x2, 0x9}, {0x80000001, 0x3, 0x6, 0x0, 0x6, 0x200}, {0x24e, 0x9d81, 0x0, 0x7, 0x1, 0x8}, {0x2c2, 0x329, 0x8, 0x126d, 0x3, 0x7}, {0x0, 0x4, 0x300000, 0xf5, 0x400, 0x1}, {0x4, 0x40, 0x0, 0x2, 0x8001, 0x10}, {0xeb98, 0x5, 0x2, 0x41e2, 0x9, 0x9}, {0x1f5, 0x5, 0xc, 0x1ff, 0x6, 0x4}, {0x4, 0x80000000, 0x0, 0x5, 0x6, 0x4}, {0x0, 0x3, 0x3, 0x80000001, 0x2, 0xff5}, {0x7, 0x5, 0xfff, 0xe00000, 0xf9c6, 0x8000}, {0x100, 0x0, 0x10, 0x6, 0x3, 0xc}, {0xc, 0x5, 0x6, 0x200, 0x72bc6dae, 0x6}, {0x4215, 0x7, 0x10001, 0x2, 0x6, 0x2000}, {0xd, 0x7, 0x8, 0x8, 0x3, 0x1}, {0x8, 0x8, 0x8, 0x7, 0xfff, 0xffffffff}, {0x2c3, 0x5aa2, 0xfffffff9, 0x3, 0x8001, 0x96}, {0x10001, 0x3, 0x7fffffff, 0x2, 0x1, 0xf55}, {0x1, 0x80000000, 0x2, 0x41f, 0xf0, 0x8}, {0x0, 0x0, 0xa8df, 0x10, 0x5, 0x3ff}, {0x2, 0x80, 0x6, 0x6cf, 0x80000001, 0x10000}, {0x1, 0x8, 0x5, 0x96, 0x7, 0x8}, {0x8, 0x40, 0x6, 0x1, 0x3}, {0x3, 0xffffffff, 0xffffff84, 0xfffffffd, 0x0, 0x3}, {0x8000, 0x3, 0x0, 0x6, 0x7, 0x1a08}, {0xfffffffc, 0x93, 0x4, 0x1000, 0x0, 0x3}, {0x5, 0x5, 0xc, 0x5, 0x9, 0x9}, {0x5, 0x4e0, 0x1, 0x6, 0x2, 0x3ff}, {0xfffffe0f, 0x7, 0x80000000, 0xffff7fff, 0x100, 0x5}, {0xffff, 0x9, 0x7cd8000, 0x10000, 0x2, 0x101}, {0x9, 0xa, 0x7557ae51, 0x8, 0x1, 0x1}, {0x9, 0x7fff, 0x8, 0x5, 0x9}, {0x5, 0xd20e, 0x3b3b, 0x7, 0x3, 0x4}, {0x7, 0x1, 0x2, 0x196a7c4a, 0xffff8000, 0xa3ff}, {0xff, 0x7, 0x7b8d91f2, 0x4, 0x7, 0xfffff104}, {0x5, 0x2, 0xfff, 0x0, 0x400, 0x8}, {0x6, 0x8000, 0x2, 0x2, 0x2, 0x10}, {0xd329f7e, 0x4, 0x5, 0x1, 0x3ff, 0x5f5}, {0x9, 0x9, 0x4, 0x3, 0xf52, 0xffff}, {0x8d43, 0x80000001, 0x6, 0x67, 0x8, 0x5730}, {0x6, 0xa, 0xb, 0x1, 0x1ff, 0x5}, {0xffff, 0x3, 0x12, 0x1ff, 0x0, 0x3}, {0xd, 0xfffffffd, 0x2, 0x3, 0x3, 0x20000000}, {0x8, 0x6, 0x6, 0x3c86, 0x6, 0x2}, {0x1, 0x6, 0x9, 0x1b12, 0xfffffffb, 0x6}, {0xaf2, 0x576, 0x0, 0xe87, 0x2, 0x2c3b}, {0x0, 0x4, 0x401, 0x4, 0x8, 0x5}, {0x9, 0x5, 0x8, 0xffff, 0x9cc, 0x2}, {0x9, 0x1, 0x80000001, 0x7fffffff, 0x5, 0x2}, {0xfffff7ca, 0x7f, 0x787, 0x2541, 0x7af5, 0x5}, {0x5, 0x3, 0x3ff, 0x2, 0x1, 0x4f}, {0x6, 0xa799, 0x400, 0x2, 0x8001, 0x6}, {0xc, 0x6, 0x4, 0x1, 0x8, 0xed99}, {0x9, 0x27b3, 0x7, 0x0, 0x7, 0x3}, {0x3, 0x7, 0x2, 0x5, 0x0, 0x2}, {0x7, 0xb, 0x6, 0x6, 0x40, 0xa}, {0xfe04, 0x5, 0x7, 0x6, 0x3, 0x39}, {0x6, 0x4, 0x5, 0x7, 0x8, 0x843}, {0x3, 0x60c, 0x1, 0x9, 0xff, 0x6}, {0x1, 0x8, 0x1, 0x7, 0x7, 0x3}, {0x10001, 0xdebd, 0xd4e, 0x1, 0x101}, {0xe07d, 0x2, 0x54, 0x7, 0x9, 0x1}, {0x7, 0xd431, 0x76eb, 0xfffe, 0x1, 0xb}, {0xf6ea, 0x8, 0xfffffffe, 0x3, 0x5, 0xec3}, {0x8, 0x9, 0xde3, 0xd7d, 0x8, 0x8}, {0x6, 0x7, 0x7, 0xe, 0x5, 0x3}, {0xa10, 0xfb, 0x60000000, 0x6, 0xf, 0x7}, {0x10, 0x1, 0x5, 0x51c34595, 0x81, 0x1b3}, {0x6b4, 0x80000000, 0x4, 0x101, 0x7, 0x5}, {0x3, 0x4, 0x9, 0x8000, 0x6, 0xffffffa5}, {0x2, 0x6a7, 0x5, 0x1, 0x9, 0xe}, {0x5, 0x2, 0x6, 0x8, 0x8, 0x101}, {0x6182, 0x1e, 0x8001, 0x6, 0xc551, 0x7ff}, {0xfffffff8, 0x1dc6, 0x7, 0x7, 0x1, 0x80000000}, {0x1, 0x2, 0x2, 0x6, 0x800, 0x4b5}, {0xe, 0x7, 0x1, 0x9842, 0x0, 0x6}, {0x5, 0xfffffffd, 0x9, 0x3, 0x80000000, 0x1}, {0x80000000, 0x3, 0x4, 0x8, 0x4, 0x1c}, {0x1d6, 0x6, 0x0, 0x9, 0x2, 0xc5a}, {0x8, 0x4, 0x7, 0x80000001, 0x1, 0x9}, {0x8000, 0x7fff, 0x7, 0x436, 0xa4, 0x5}, {0x2, 0x7, 0x4, 0x241, 0x4, 0x9}, {0x1000, 0xe2, 0x8, 0x9, 0x40, 0xed00}, {0xfc, 0x17, 0x0, 0x6, 0x5d, 0xc7}, {0x1, 0x10001, 0x0, 0x6, 0x5, 0x9707}, {0x3, 0xfff, 0x8, 0xfffff804, 0x7, 0x400}, {0x800, 0x80, 0x6, 0x3ff, 0x0, 0xff}, {0x4, 0x200, 0xdce2, 0x1000, 0x3, 0x7ff}, {0xa, 0xfffffff8, 0x3, 0x1, 0x0, 0x8000}, {0x7, 0x7, 0x10001, 0x7, 0x1, 0x1}, {0x8ae, 0x0, 0x3e, 0x2, 0x9, 0x4}, {0x9, 0x80000000, 0x0, 0xde, 0x401, 0x1}, {0x8, 0x7, 0x10001, 0x4, 0x6, 0xf50c}, {0x4, 0x1, 0x7, 0x177b, 0xaa, 0x9}, {0x80, 0x2, 0x4, 0x2, 0x0, 0x6}, {0x3, 0x2, 0x1, 0x9, 0x4, 0x7}, {0x400, 0x8, 0x1, 0x1, 0xfffffffc, 0x2}, {0xfffffffe, 0x2, 0x1, 0x80000001, 0xf, 0xffffffff}, {0x1, 0x1000, 0x5, 0x0, 0x8001, 0x3}, {0xf, 0x6, 0x6c6e, 0x10, 0x7, 0x13c}, {0x3, 0xfffffffc, 0x7, 0x6, 0x4, 0x401}, {0xd94d, 0x5, 0x0, 0x1, 0xd70, 0x3}, {0xb3b900, 0x9, 0xfffff0b0, 0x2, 0x5, 0x5}, {0x5b54, 0x0, 0xfffffff7, 0x9, 0x411, 0x3}, {0x1, 0x3b, 0x2, 0xfffff800, 0x14d, 0x9}, {0xfffff801, 0x40, 0x7, 0x3, 0x3, 0x2}, {0x9, 0x9, 0x7, 0x1, 0x7}, {0x1, 0x8000, 0x64e, 0x5, 0x2, 0x3}, {0x18, 0xf, 0x1, 0x401, 0x4, 0x386ab657}, {0x8b7b, 0x9, 0x4fc2, 0xfffffffb, 0x81, 0xb}, {0xffff, 0x3, 0xb, 0x3, 0x19100000, 0x7}, {0x8cf, 0xba40, 0x0, 0x7, 0x2}], [{0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x4}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x2b243157c15d2bb6}, {0x4}, {0x2}, {0x5}, {}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x2}, {0x4}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x3}, {0x4}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}], 0x1}}]}, {0x4a, 0x6, "cfc7a98f1539017f59da87d69f96d38e55eae1b08f257c06b3d7d63234b3f0b41ed652837e3ffbe293b447c240a00b59d2664f9796e471852afd8b7854542b65c0ca935b9854"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x32f4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@delchain={0x34, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r10, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0xee}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x6, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
sendmmsg(r0, &(0x7f0000001340)=[{{&(0x7f0000000080)=@can={0x1d, r1}, 0x80, &(0x7f0000001180)=[{&(0x7f00000029c0)="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", 0x100c}, {&(0x7f0000001100)="9df9d5f100"/18, 0x12}, {&(0x7f0000001140)="3e2a39e907c7824bb0cc3925675c1a01197782", 0x13}], 0x3}}, {{&(0x7f00000011c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="6dbdf9cba9b2e0ebd01fee55728a51f32c08e0c224722bcf6a342774ae1ee0d32a1cf66a2de5414155f7ea4be89110ab79e8376d6b0d8f513c05c72792d904579c95006f3efe10dd78f2f47c65c4943ee1e13ca883580b27f36a01bbebf5045c883701eebf2fba03e27812505828e67faff3e1b90092e34f3bd92b534727b73943766c2f33171a97fc3a237d8bbe", 0x8e}], 0x1, &(0x7f0000003a00)=ANY=[@ANYBLOB="10100000000000001501000002000000c07249c379fb092600ff7a57c45cd0470c27bf4414e0f3719b725b710baf164dcaadf491b8e8669c8a501e5f2c2d71b50689e11693cfd0cea4212a4f8f892fc4701f132d0be2023f12144c7a877fcc7c72af76d918b493e2aa47b283628859d2848928fbea5b68c2d36c67174e5490b159092f042a8a1e6ff907de29a67e935f7b14eea2f710a2ba37d734205205ef11cb628de56440834987e141ebe8add65239277d60d702b3ccabb2050c69f39eea7989c472a0351f9075d2f2f4d73c96427d5fe77f6437b9ad37fcd5ea49a7122c8ea4984d306974ead168ff87b3b6ccfaa03299a1fb5d78f1fb2e77dc41c659e52e5799f32b830c8a76d57a7fddf3d5fd65dd8b573453f2f8ac03d8e560fcf11ed6e2751de695e6c1ecdf8e87c7f998ba97e9f7dbe8cbacaffc50aa9602e70f26a45d21a4e4405afb9773680db8826a4c440251c5e3e3fc71a7598a5fb670044ef2c5b09cd4be3bd3fcc33370daf3dc5a507dfa0e5b21a896ea0fb2f5da1542fa3c08e4ada3f08442190bf10c691fc541039003999578f297f26c78a7c3df9473466490a400459b102e5d8d758a0bf53ec6b9d980e4ad447cbf8c184455250e76532144a7e7654a015b1870fed712a67ed64aa9b2c713c07084a2dad2b7fcaec112e7940ef413569a806118cc55778c536ee49b839818fa85954b5136f51ec45c4bdd3761c88e377c4897c4784b80c56ac3a74a8e709048a0c957b7b627604ce12459488c131f49f754343adad41f2cab22b95a876e3fbecd409bd27040c78b7b0ad3c3222e2ff363e840c716c536fe29bda19844226ffeef1a10ce1f44c0a8ac1607b5b585562dbfeaa362b160b5ea5c134f96f7a8fc7e80e7ddb7a40c4c4e4e65009348d909163a4ed2754f7f2a34a2266a7a9ab32dd19ad6e8dcbfb18b4a14d08cc0c709b58c20a2d56fb7b9d72c0ffac5300d16afbb7429e2f16f20d2be79a04e13ab056ed53f671bf5db17c28c26c5a7b1f501f0944e2be536e0f7dff0cf2555dd092ddc0162679545950a8f31cf1418d6a5da56a03bffc1e4625436b9e528ce769ff42bdcee6877363ae4cc70fd83c83e0f637c5ae22f4ea42d6ce96b3ef3871aebc48f21be72bb4c8ff2bea2c9410cd8adc4cccc81f32a1f8482e64cbb50bb068bf0e2298f35402385270dc22cada374be80a721ee92601c09dc1e1b2d815794c3c82efa74c4948fab131abd0e8aa25fe909774fd9c3c389c2ad51d4c03e886c7c8d8ebd6b6076647e9ea507e6385cdb7b1385b8128bf86878368f51d9ff480f5eda0d28690d3ff694421bd88f172152a3ab062633792c342627be261ed5ab6105cb5283b8385c53cc62fd2c0ff69b5d6ecdad04c04e1910cff05abcc92faa5455e58533ae5a1df2a0ffbd20f36028ee72822073f3cfe03c08749f027734a4bcd7ea7666ce998c376f6e49747f9f014e5a4d39a89b7b81bc8c5ff342c31fc7702574ae7eb5fba04c7c3f126841899d3ae2fe85ffa5604d8e038ba17fb5b0d51bccc01a664de20cf674fb0f3abaa0ec3e9ea3eb68bedb877618a4eb6a0d09e5043c4cb8246a8656d86789a188dfd5cbe6045411cfc3cc7c4bb70c5ffce267d22e7209526fa30efd9e5de2d9fcf77a9910dbbc4c5cfe0632e6a5462a2112b9fb7f0aab06e8a152520f2dae35b80e7a978d31cdd8fd4379dc5e3b54ebc7ee96cdd7d7fad8c611d6dcdd95dc121a396d6ba30a024ad36a96ef016019b14b920f8ae43677e3e85292c46990fa25fce333a9440883b61f0a9736dca32c49d2f08020f0f8270e4116c83f97f5dfa0aefd3d64b2d387a6ea8fb18bfb58412cc215ceb2ad54c9227810b6705cd34feb19086bd1bd711609fcaa9b3280445b2fe18d9666a667beffe7673aa6e29892bd7193cd877bf6226155650ec76e4aaab4f46289168c33ca80d9d03612c15be414e9edd647f468b9a79b54b82a844451f4e07c66efb6aa9376cf427f180b3e75ae283eef3f7ff23fd5d362ce2d8220442f944db2802401bde5dc923e2ab80eb20856ceb52db900b2ccf57b016e5beb4cc96239660f5b5560c84cc2d80888725612f95190f6b7e04f49b189d45f9e8be6b1d359c2dae83099bfb533e1fa6ea005209783d5eb06f8bb2ff6734bfa3c9f1f4bfffb2b43081e16ab1f2d498dcb1fbe04d9e912d2c49bfe4e41ba43fd65bfb305be83a89f6a7e250a5f23ec05575e556e3cb9b12c217a02cde2c729c7404d2e0bb448b2c026a2f74ab757c78dd37f017b2342b685d9288832f3b74777ae56379434a5388a5f666c8930eef14637dd941f349364d771d96c731c5551f29e204e27d809b5476d6816375d97f404a7c357ba356919a0d2b42f931c308f0d1b96dff564d9140a0b400da522b66fc5a17d2f7ee93439f01fc8ec26a4b719b5425cf91c1660b3ba6a06b9d6367bd2dad6e48dd5a837054c14b0672f8b193e23c094d153f56024bf68c033beedbf8772bd8164e3a84df3d2b5a47cf5bebc65c89fb4ca2632507f6ef6b2fea4d149c55a28ead5d85a7a93b874d6f713ee9909a8c91f0a86f370b6e9aabf73c55f1896219241d1ce3f2cee4ba96cc8f975f512ee657010a1004b439562985eea20758b93573b732aeee8f2f6c8a95917544e8da431ffc9d46ca463a67d0136c948bcf6df6c8ef7e692710aea5ee70d5718e17aed9e790a57350346112b3afbe583d2c5aec6ee0c682f44da72b9847113e1f8c9754902f33948ccd0c00890b417fa57d672a6ae535188326190002ea1620b317ede104b3224e1724bc523ea49c6f6dac9da102771e30aeda8a82323ad542aefa6561f28d96e520f27bbf7a72636710b3149613543fa91e49fa4b2a7950621bbec099301b0f9305ace18d4738a5887fce61dd652bd21f5e87e386fa87ff41fd2b8214675b43712c189ef0ed59e44d5c6a1921a1f3203d884666dcaf909244e347835ac79f2a4280107d67c422c7e2c57f0808e6a91a724ef36498d1ec8555d6b70c732778672261a2cfa15fa5a79449ddc58c3ef04a3bd7e7628427c4f78848cb95c9e2093b56a3a11746883f26d7a05e7d14cf3e74610e72f678c2d07deacad9a06fbf4f9c0b0e2040015b0ce296aa8869df44b7e177bfe51aae891c2a7cf42ce85c9de4388f6c1bcc0f76db7d151fd77b5bba46b67b8454abc9e8f5d651b48cd68fa5f4f4aecc03416103a5b0aec1ff34d1976e20fd86cb0f970263b426701194ce0412aa7d4a5efabe4bf4db8bd91808d87c37f992e694bede0c0992e10a0b1297ad06fd382a9a3e83f287eb66ff1ad8f06d44a5d6f170d9da076042a5d14ea6126ec722764fc43cf2efdb8f6e3d6a735b6115d9bf11bd4bd7bf938ea3a921f8f355991c3f8a45e2cfb8cc2999e23c699b2074fe1edbad3a0d00cf143124e46a578ce76f713746720e7b541af911bad4c9d6fefd3e25886bae0317c67638df34c415c95e891537c9200ea1827543740f1416e1fe8a9a2d8ccaa6ec72277f84db79dbe1feabbdfa5cfac1f5a0b63c5213a13c0c4d5fa00ac1aa704c4d0b2cbeb162fc5fba06bfe5776f69a74e137e1f7935606c77f8ec633ed9a824e3c03b6943d500daf2adba92cb88a243e35993e73bffb3492b3d93536efda852259e93b6f90d9bae8610c792f6ed729869009d97bc251ebb37ac12b51c70cec7da9a51548cdb7df429c6d97d30445c6ad75358e5e4c9769e7040c04a0f577c304dab1d0df3a37670b8df6c034a8310552bfe621b0f6e2f27a86ac77dccdd57a80e26c57450d0e673f61a276aae1766e51c70ab3e060c5abd24e7b7ae2311af0da8fe30a505ac6901417d4ea2f03fd0cafa9bf530e81b7d204bad7c89d0ab0c9407593c4ff7368c8e14502d59deeaaffe80cc0545110a7a162dd683107e84bfb98df971d21bf5ba7762e100b74149e99723ed6999c370a160b0b879b66e3a4fd79218ed2e7f2884fc7786192c7489e68abb9e589538988cf242b292d5315494dcc0d7768c33d9d3ebd897496f62d5d9256735761f12a354521a0a65735cdfe358fa1d9d6417521a035a03af641620167f769c89963624399ef1a081d90432b800914764edb3f8dc111bbaafbb085b4c47cc16b325d67feb70039f741ad1569cb346260984a2ac651c6fd3050601cf65330f0d41ae64be159c4af79b0144a577a98aedcf515074d38d3364bbf49102ed2e7be668a40076b232b0633a8a7abfd35f6ea3bdee343db4896fd5e36f599977363df99595db27bb8a9ce00d5766dfb9c43fa5b06facadf1d997552d052ef9e8cab2afa456abf2f4a7a598796c654461b01d5ccc9e6de949fff9d5f042e66cebc25cd59cfc32861a737711b3a5f72b7668b23b13240f148a8b9df0acefcff35a45930d398a2d6fe6213b78921b19d322163093f427820f030e58d9ffecd2c677316c782d069977ce91fc4676ee3dce450a4fa1f5cd6b46ff3c4cac435d61b686ab6a352ea0ed6742075eaf1e0eb8a0ad71e66fddac33721e6180db326b0853eef5b3d3bdb5a9b157acc882881176d0974fcd6061ce79e2b24f631464cb55a1005efce3d3a4180ffffffdf3becb4c0d433ad988e45c5776e76b122c66851d8b04ff5dd0becd4c53655cf43743b04ca141856cf36de666c19bb1a4c45aab7ecdc4c644eae3b67bf75b16c15f034016cdf781c8e344a9f305044624f43b79ac361f6c5c029da4b9db19959d766fc0fde2f0e32b89259422cf043ed3a46b8290a729f724b770243e893aa85221112b648fbcd83f14df558fe7e759023c3fe364f37a46039a3dc7a8237fc3c6d2905e1722ae195a5996ac3f2e6436281572fb682448f098a8473e65e83941eedf8184a206834772e0b1627ab1431aae981e70d481d614a75c8ef05f87c4387bf64e8f3aebace9135147c517c3b4b1b077e6ae319d500ddc56f6a7e2b371a3fff4fd790e0da1a19661d187acf6e81f0e7dbeb71698550f418cbecacc42e6fb0a863747dbaa3e4b2557555169b17fd530093d557fa1e45082aea1d2a48c5de6a93fc59f40f6675fa4043c442b4f848e8b8d43945303fc637821974520b547b4a96f8eb6297f957e0009f0c1d26e64896b70d5b95a75292eecc11f00bbee49a12ed10bd2624a7b59acd5172cd22062c20d7f2640154d4a6f87d36b8b48848f8ce18ba8a537c6b397a2c0389ba0e2136999b72576cb02f4faeee745c9324991eb57ebbb6a16ee8cfb2babcc5642e073d7429bbf5177fc4c1654bc7aeec260d28e9330b32854069806a89b84010f52962d026bd32155b22d19514057d14cd665b0f82756246c86979fbfd22451eed1efbe5033425f2f84a91be6c502befeef0e36ce1c8c6767c40a4b7f2f28f23ceab477d63cf13f9bbaaff22ee30cff12c15e4857c81ab42606e1b1b0f46d1bc556cbc10b0e0b1b405145643387b8570b3e9352823a589fa1963ec5fc5c8deecc082059e11fe49c412e7ee34ebed74d2547cb68b0bf21126a9bfa86225aa785d2579ffe65798c8aa02700b044909b83242d37342100cf4d1e1cdf0352cc8d6e904ccaa4712cf544eb47230faa3064f276ca87b0e009782369bbf62074147b78984688659fc36e4c1130e5b1b2abd00ad8c549af8f28139c6134d48b2b2401fac6b9b9e4bad324182bde4caba0d6632c248f165d0f92b9fa53f3cb7762e7ec86ffb11c8dc66b22ce48b5772037f7108a4a2823de8de1b7f455a2dc2bfc98278d604209acdeec9d50e93dd8b197fe2f887a0113206e24cc3c2b4893b34366b814c2c7831eb03e665c417614ce010000000000000000e010000080000001800000000000000810100000000000068f79a00000000006000000000000000070100000c0000000c44eec8d24d43d5c12304e393e2b18cd811776b4c480d4c6d2a8bbc2b1649512510a704734ea11ae23d8017413ffd31ec470c52319ab024760eb53e331b5b2d29882ead2e193153756e000000000000800000000000000013010000000001009c8a23b324f86453ea3cc711ba45c6e96bf5a7f56369b6053785bdedf65ef6be972141e47f8b0042519750d48eeba6ea8b11ed091ac646981d539acd5b0a2dc045d536abdff666a4d333ff0a1c920d86786f9ee42c09ced8214e1578144815d2bff2edb103e258c414611fe585000000c800000000000000160100000300000060652d2d2e905c4a03cf97b21bef55afef857a6add1fde9a0d8c40e345c2a2bbe4c985933424224af8bad6434e62ad967d157f37ae671a887479323025ced74c38cb23aa7b5f09d7191eff2a2edf149474936592ec67bba3c7cd7eff565fb3dfd0a0436b88fd07ca3b2d8ddb64431e283f89c144d436413e1e0e8379f2c5414a262d81d6e93191d3d9928f78ee6d05d20c32645f7a74cdf23225cecdf72666087047bb1d9502ef728fbf54f9749fab7b865a850000000000700000000000000000000000dd0f00008d8b98c5874c0f37952deea11495569073c27d7dde67a9287634ebc0f2cd0e383f7ca11711474c52ce454ea624da3a8377b70019a30bfa42cf557b04823adf16d3dc8463baa05c9dfc4dce03247a607b64ee658c49b985a094dcbb0b7439350098000000000000000901000007000000624403df909084bad81971c03da12df0427654806990e340d833c1e99c50f3f6c65fa857bada339e8f3a0bc8409450de1bf29ada9a741be525f4b21b241cf4bc235d342f7cb6eee894c3d6e002337cafd0a90c97f120aeba8c293c6e7aeb80221e6dcac37b602a7039c6c5b104de16ae53b27dd201e783990a75d7e5c016007e93f958b3527d00000000000000000000000000f16d965acdccaed3ee81b0d7596c2d20947cff5aa347df"], 0x12e8}}], 0x2, 0x800)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f6b657967656e5f657865635f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00140660"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "ae30c66524"}]}], {0x14}}, 0xbc}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r6 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r7, @remote}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r10 = getpid()
sendmsg$nl_route(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004)
write$cgroup_type(r9, &(0x7f00000000c0), 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0", 0x1b}, {&(0x7f0000000240)="d29edb52e9bc960d8858f5476408b13775dd38ec094aa3", 0x17}, {&(0x7f0000000480)="d91197e00f747fc820d9e533b12152b68ad35d567ae53cdee5f5a8747909c8e0f1d6c55d041443d850d904b0108b5d0915", 0x31}, {&(0x7f0000000340)="c3b3269390", 0x5}], 0x4)
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x208, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xcc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x98}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x68}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd817}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x420}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3135}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4b1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x2880}, 0x90)
executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000ffffffff00000000041000008510000006000000180000000000000000000000020000006500000000000000180000000000000000000000000000009500000000000000ad0300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)}, {0x0}, {0x0}], 0x3, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, &(0x7f0000000380), &(0x7f0000000440)="6ff50e", 0x3, 0x0, 0x1}, 0x50)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x2c}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x366, @ipv4={'\x00', '\xff\xff', @loopback}, 0xceb}, 0x1c)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9)
socket$kcm(0x29, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10)
bind$tipc(r6, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffe5a)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1fd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
executing program 3:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ethernet, &(0x7f0000000100)=0x80, 0x80000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r3, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="050053000100000008000500cb5dcc1e70c9e2d4d169fa4909c80ef4d453dd868a02b66a5ce3d3e2443f665fe999b2976bc798624acf7b5884c93c96a5774a6befd8bec3ef8a3e633af05081c2e953591e837cef654db4aa30545243587ccf6fb0"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="000128bd7000ffdbdf253000000008000300cce61fb8bb3a5c73622acfe354b2a9997b3e06b65a10a6accfb5d9450fd867921cb581a0ed262dcb7360f9bae7948acfcb1dede35d913726890addda2bcdead1c6d1481999687de4858140bd94647ce1412c63897d07eaf693ad289bf0b9cfa6acef46edbcf88c1d691a7c516980f4e6f61005bff10d22115060ef6ab66db6a164906b", @ANYBLOB="f24ead73250559872048a70328d92ec7", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x14000)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4)
connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0)
connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x80, 0x0, @mcast1, 0xfffffffd}}, 0x24)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r11, @ANYRESDEC=0x0], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
socket$kcm(0x11, 0x3, 0x0)
executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e, 0x0, 0x0, 0xfffffffc}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000feffff3f000000000001000085100000060000008510000004000000c608feffff3f0000180000000000000000000000000000009500000000000000950000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x8}, 0x94)
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x73760171}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0xff800000, 0x8, 0x4, 0x8}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e, 0x0, 0x0, 0xfffffffc}, 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000feffff3f000000000001000085100000060000008510000004000000c608feffff3f0000180000000000000000000000000000009500000000000000950000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x8}, 0x94) (async)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x73760171}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0xff800000, 0x8, 0x4, 0x8}, 0x10) (async)
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
recvmsg(r0, &(0x7f0000000cc0)={&(0x7f00000005c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000780)=""/237, 0xed}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/160, 0xa0}], 0x4, &(0x7f0000000bc0)=""/212, 0xd4}, 0x40002100)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r3, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="45f447", 0x3}], 0x1}}, {{&(0x7f0000000b00)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b80)="dba6c2", 0x3}], 0x1, &(0x7f0000000dc0)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x20004004)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000002c0)={0x8c, 0x2, 0x8, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x2000000000000361, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x240058c0}, 0x24044010)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, 0x0, 0x0, 0x6, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80000001}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x67, 0x2, "23478756ca665b9bf31800364cfc57e39665556b662544663bca83136ac61046719d719dd397d9ad41f5bfbc860443dd6dc20a41dbb0478e652b6d08b996ad16665e47f005e0efc19d469af4c753d02d5415671a00f184ebcf0281b4b8710bfc5c6f5a"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x29, 0x2, "c731834b090f60971b69234dcb137a090fd3568734bc1b9b7791a9c388dbb835a5afd82d97"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x5}, 0x4000)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x3f}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockname$inet(r4, &(0x7f0000000380)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10)
writev(r3, &(0x7f0000000540)=[{&(0x7f0000000400)="a7a42bbaf2b3", 0x6}, {&(0x7f0000000440)="42d43b39b4d7f058590cc8bafd005a11c394a740b7f6b102da1e8e316719d2186b8d4c07a3092cd8a43eea853c9e484d692d477be2edf9a70b18f9d779de2e1cdfb354cbcfa3c38aa8c5e0bf3a6e9fb6a68ae39725ecdf766da56e6aeed2db7366bf45cec7890febccc033f0aae8fbf195a340586e32a34ce81eccd8a412b58d009160cde9cbd219e4e8e20a768d64e068841618f065541fb36e4b67b94e6c2033aa9680", 0xa4}, {&(0x7f0000000500)="f11c", 0x2}], 0x3)
pipe(&(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000005c0)=r5, 0x4)
r7 = accept4$nfc_llcp(r5, &(0x7f0000000600), &(0x7f0000000680)=0x60, 0x800)
shutdown(r7, 0x1)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000006c0)=@ccm_128={{0x304}, "dff7ef46937eb293", "0d2706bf328ce726906281158548b9fa", "0b45bbe4", "a7c488f4aabfd34d"}, 0x28)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x140e, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000010)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00', <r8=>0x0})
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x12, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x0, 0x2, 0x1, 0x0, 0xb, 0x50}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000980)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000009c0)=[{0x3, 0x1000, 0x4, 0x6}, {0x2, 0x4, 0xa, 0xb}, {0x3, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xb}], 0x10, 0x7493d753}, 0x94)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r0)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x48}}, 0x84)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r0)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, 0x4, 0x6, 0xfea9362677e46b12, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x48850)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r5)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r12, &(0x7f0000000f80)={&(0x7f0000000e80), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r13, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
r14 = accept4$inet(r5, &(0x7f0000000fc0)={0x2, 0x0, @local}, &(0x7f0000001000)=0x10, 0x400)
ioctl$sock_inet_SIOCDELRT(r14, 0x890c, &(0x7f0000001040)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @multicast1}, 0x225, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, 0x7})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@cgroup=r6, 0x9, 0x0, 0x77, &(0x7f00000010c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0]}, 0x40)
executing program 3:
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r7}, 0x38)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x7}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r10 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
executing program 2:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001200)="4550d9f9e40027ba89c54ebf4542e35cd1e567c8f81c96b83be578deabb575e2b115f625117a56a08404c696ba58df4898be7bb3ebb591d787d02e122c629e8031ded4a28f1fdaa8ebd874b75b7655f8ce877352cacb6251ac76e8a14264d53d68c3f1e568b4e5ad96cb52e82389cd387e13e46be294f4bfbfa2916a360760efe19cdc30547ceb1cd78108f2811b8ba9081f0b83f8c81c1931fd837bb064f844bd33b1b62b0ec35127499516cfa256544395fde2896d64c663bb25", 0xbb}, {&(0x7f00000012c0)="f64534ec24a61499659572f7a1571653c3e4370ab7dd74fbc58554ac8b423c8d8a6e35634674ede8720aa2191ba8451fdaa0768de441b2abfa35ef9c0455d6d51abd2be90ac7c733309c6d7d8bcb6afe158e35d26a3ea0dfaae985d1791225e9c9e5f6a996ced42ab76bc223f531595dafc84e30736085d8c132a4fb8e7eba9b633cf5da2498cb2bb3d3cac91595e8adbba7a5847038a1e50688392a79436db7a777fbddd4f8b1605c027142e606abc494297df453c171289ecb496ee1a94903df02355b2e0745b002d772faccfcb67739778e3905fd9c86b3754d6785ae38ff79a4", 0xe2}, {&(0x7f00000025c0)="394725042517980e7b6e6e881573e685b99391e5a537435b24298e91c898cd5e035f06e4d6bcb8b3661c3fde64d1106fcc1d23100e6f356cbde61f3080bd0ce57280f7f63512d64e0840ef5efbb4e5010b7f39781484b18224db04e7df98794d3765f324353baf5d502c21fe58bf54bf6b2827bf2d5193be13a648f1e9f782002fac5c5a984323f66ded8bcee72056dd1b12d94ca2e205c86b7c3d5bc92129c33327bffe8c5f3cc7b2eff971272dcc159a05500f0b3adfcad5f1d06801f87f7d54c8c9a0904e87e9bf855013795c63a5cd14471997e7ea2191bb21a7453e731a653bc8c922d010059c01294b78c1b00f19bcd7878aa7a00d", 0xf8}, {&(0x7f00000014c0)="f76a5563dc951d772e9f4ec11ee1248ef7482ce6ebc305aa76b09c003a50df44abf0d864ccee6e783e7c70892c7eaef7c610dc7d39409853c5a4794e23ea6e7d2ebf01ad40c3480940e88f7728edd972c9399fc98f", 0x55}, {&(0x7f0000002740)="1127339651ff6d39341c2f659b2d19438a9f5e1ac852c632582b75965cd7a4c9ba88f160aa4c3322673345e4fad3048dbd3224f3ebd4676a2d28f3af5f742a72e1ae44cf6533fa78fa044b66cbcb0385e3eebbfeae070057ddd257056a75df22f5ee2864929d8809b79d113793dccd36ec7d88c6aa35d4075e9dd363bd1e3473b22561c79a0fa94e350a22f33279f7cbb3dcbadd1c7bef6ae9f676b1d3", 0x9d}], 0x5, &(0x7f0000002880)=ANY=[@ANYBLOB="5800000000000000060000000800000052e549da4470ab5153bd35f5a51afd9defc59b7e7a24ff67c9c7048c99cc06f32600de9d7661ace8f38306e514746d29e52c263e160c4488ea523276818df9fc6b0000000000000070000000000000000f01000080000000a7f4bcf907abdd49fc7f8d4f152661ec53163cd29703d7033fc228c04111bf6df54fa703b41f2fbefee8c2e3b93ff1e158fbf1f9d399bbdd899f7641a4c7c68b11873844b4b018f6159c2d6891b0d1f498eaeb34d921df6c20a8f48493d8a6225900000000000000"], 0xd0}}, {{&(0x7f0000002980)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x1, 0x1, 0x3, 0x3}}, 0x80, 0x0}}], 0x3, 0x41)
executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0x4}}, 0x26)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450000700000000000019078ac1e0001ac1414aa0c0090780000000045800000000000000089000000000000ac141400443c0001ac1e0001000000000000000000000000ac1414aa000000000000200000000000ac14140000000000ffffffff00000000ac1414010000000000000000"], 0x0)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000005c0)=0x1, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet(0x2, 0x2, 0x73)
setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xb9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000c080)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe60}, 0x1c, 0x0}}], 0x1, 0x8040)
ppoll(&(0x7f0000000180), 0xfdfe, 0x0, 0x0, 0xfffffffffffffd86)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x804)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890)
sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
write(r0, 0x0, 0x0)
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00"], 0x48)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r1, 0x0, r9, 0x0, 0xa3, 0x2)
close(r7)
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$cgroup_int(r10, &(0x7f0000001480)=0x2, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYRESDEC=0x0, @ANYRES64, @ANYRESHEX=0x0, @ANYBLOB="cc30cd22182416d77857ec1184d277cfa0f8696607840fdc421cc20257a0", @ANYRES16=r0, @ANYRESHEX=r5], 0x48)
splice(r8, 0x0, r7, 0x0, 0x3ffff9, 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2c0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x5, 0x800000)
r15 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
executing program 1:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000080)=0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
r5 = epoll_create1(0x0)
epoll_pwait(r5, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="e3f427bd7000fedbdf250700000024000180060005004e24000008000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x401, 0x100bf28, @empty, 0xfffffffd}, 0x1c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10)
sendto$inet6(r6, 0x0, 0x0, 0x800, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002900)=r8, 0x4)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket(0x2b, 0x1, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000280)=@ethtool_ringparam={0x15, 0x9c, 0x3, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x6}, 0x4)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x44010)
executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0802034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000700064043b2010014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'veth0_to_team\x00'}, 0x8})
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=@deltaction={0x14, 0x31, 0x1, 0x70bd27, 0x25dedbfb}, 0x14}}, 0x40811)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xd, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x30, 0x23, 0x300, 0x70bd25, 0x25dfdbff, {0x2}, [@generic="6efbe30eda55221ad80be26b728e74ff5aa3f361ad200c453aef56"]}, 0x30}, 0x1, 0x0, 0x0, 0x20004810}, 0x4)
sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r9)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800"], 0x38}}, 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000d80)={'sit0\x00', &(0x7f00000006c0)={@rand_addr=0x64010100, 0x1, 0x0, 0x40, 0x0, [{}, {@initdev}, {@dev}, {}]}})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e23, 0x8, @mcast2}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x1, @private0, 0x1b9}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x9}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x7e, @private1, 0xa5d2}], 0xac)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000180)={0xffffffff, 0x2, 0x5, 0xfffffffffffffffd, 0x8, 0x6, 0x5, 0x1ff}, &(0x7f00000001c0)={0xfff, 0x0, 0x10000, 0xc373, 0x6, 0x4, 0x0, 0x1000000000000000}, &(0x7f0000000300)={0x7, 0x3f, 0x8, 0xfffffffffffffffd, 0x2, 0xe511, 0x2, 0x1}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0xfffffffffffffff4]}, 0x8})
sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x474, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x454, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd0}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x430, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "90"}, @NFTA_DATA_VALUE={0x97, 0x1, "509dd2f330cbbd0f715eb1c8846f0ce77a4e8a15b10b57cd3d42826f7d8469223a24df77fabdeee4b03982a20e4e4e799753b9fe1afa712880446b1c57a88b945223164f060a17d68fc3bc720c1a1094846edaff1f536df7aeb6fdc8e0703a0f66ffd1f3451cef55fdfa7a7d6ba4c5828f5f44e5ca9724b6dd94b957e812b4b7ec7057286e9decb99e09a1d49e7dcda0e51311"}]}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "7c091e44ecdcd6f055e26cde10be92157de79e4bcc04f4180013f7e3a50a2c827d8a7630e11992b78aeba622ce66c804404e1fbd094bb0821846b19d70973ff73868535ffa7d05113e8daaeb66b83477c4f76784b8e1bb3bb27e3945a73acb13a4b4c6ccc9c8ff38cb25189ff800ea045926eabfbbcec26ea109611eb2fb37ac3db3fc8b7c45e0642ca3c868d0fcea004bce148c2c17d0a9a7"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x77c8b58254cbe6e0}]}}}, @NFTA_SET_ELEM_KEY={0x268, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xee, 0x1, "44f2645865c90c583f8754729a9a1e8037527f9e1dc16efd1b9c8270a8b1488e52dc92c18599319859f36abb41de3fe59b7c7cf9b309bbb1076c6aed19e61d9556dd360d9bf66197f4fa8a382e6283706bdbfe54056da3192f2f10af25a0ba3b5d8dc2f23a5e18d27c64c4bb1c4a9b76da065a9170847005aa536b6884b4f04fb10b8ecb6695b014c56081cf3aadd68ac239539c581b0f10f505a6b6f7c8084332774a8f50fe364236ace35f46e1049e8a1a06687364648d0bb9ff07e78f1cb8e0f70f4aa1bf7e5a320fc07438473dd2425f98cfedac0cb7ae14d6fd2bc4edef15e27f403e2200f891d7"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9d, 0x1, "a3d42966205bf2a6af3dcab7eb3ace75d6c5ba6c4ee48c0e361f33fd1663194eac6ab4848de7c55f232cc2726dd1db1fe8cc709982e8d4b832e9994bf5362192d907a2207c07c2a593658afd938940ab8f7280f83350fe445ec3860d10da39ebfb896abc5bfc236faa95f4e018991f1a6fd6bedeca2f5fec39a9306c474049a0da584f90732684007a9f53c1711ec270ba0711e00a00dce287"}, @NFTA_DATA_VALUE={0x9b, 0x1, "b11ce83e6e592113436d80e46b7f330b3ccc3489f5ba4ad6fc1c49cfb0a1b716054b5c39f4fc1ed22cb6bd27c5bd42b77d5ea6410d6313711cd24fea9e2865a0f196f069e4039a3c66cd0bf62d0f15778233b500250ceb225a3ffc939ab3512debd08b9eaeca8637fcb546fc5273e80815b3fe533d7f3091f64b3a959c58218029fd0bbbe83b320e96e013f924c9838417d7c5bc6edbf2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x474}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xb26d, 0x51a00}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8000, 0xfbb, 0x9}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xb26d, 0x51a00}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8000, 0xfbb, 0x9}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async)
executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042", @ANYBLOB="4f7d5bd617f840df2439ed09dc0ace820a29ca3de442d71511a3936d4e46f7cd60b6a10ed1d5665e817c6f40760cbe4ba2b205473363a74de8541deb9552406e6b46d5ed1aa77a90b0bf6de634fe3a19b1aecd6ee472e4e4f814ee1c4800a114fea0de4e51f5779c0e9fe54ff7528407cf5c02a43128a6d2a35ee3b58f19d93924a7554c9e63d364e435a2595a80ae0ab142da9fbeba141f15f9fea0b083ba29d1aad1084488d513d96d959d438c2d2c584dea00a2", @ANYRES64=<r1=>0x0], 0x18}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee5, 0xc20336fca854d112, 0xffffffffffffffff, 0x9431a000)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r4=>r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=<r5=>0xffffffffffffffff], 0x1c}}, 0x4008054)
write$nci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="400109", @ANYRES32=r1], 0x14)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340))
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000003c0))
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="a2450a9e3318d258f34a983dfd3261f3689cdd830c742e2dfcb0705be3e2f7563f66d47de5dbfc8f6ebfdf771ebaa634f13ae0c01180e2b90b0b0c694490141281dfc8796539749f9c90c9d430346154354c011829fefd82bd8284cf9608dc1f0f69525d4ac1e1d7850c9e0edc701dd3e1fb2ce3cbf4f18614934a91d49409d5bf968f9bd6212d265fe00c4eca7681e46cb3c6a0c96c784ea6255443d3eed61ac7d121fe03d325efb571dfcac72dc291fc4ad6f88e33193f", @ANYRES16=r4, @ANYBLOB="edff", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4045}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000300)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r12=>r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x1c}}, 0x840)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r13 = openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYRES16, @ANYRESDEC=r14, @ANYBLOB="010026bd7000fcd0df080001000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480))
ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000000380))
executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$unix(r1, &(0x7f00000053c0)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040085}}], 0x1, 0x2)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ace773cd57ef505aa1b33e88583288fa2b7fb5a88c928e4b175d4b1d47e44f3659a1ff7f00007ea4a530f43bdac64f35b4", @ANYRES16=r3, @ANYRESHEX=r3], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="002bbd7000fbdbdf2508003f0078ed0df83e6198cc01000000"], 0x20}, 0x1, 0x0, 0x0, 0x4042}, 0x84)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r3=>0x0})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x1f)
bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0xf, 0xa}, {0x3, 0xfff3}}}, 0x24}}, 0x80)
executing program 0:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r0=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001200)="4550d9f9e40027ba89c54ebf4542e35cd1e567c8f81c96b83be578deabb575e2b115f625117a56a08404c696ba58df4898be7bb3ebb591d787d02e122c629e8031ded4a28f1fdaa8ebd874b75b7655f8ce877352cacb6251ac76e8a14264d53d68c3f1e568b4e5ad96cb52e82389cd387e13e46be294f4bfbfa2916a360760efe19cdc30547ceb1cd78108f2811b8ba9081f0b83f8c81c1931fd837bb064f844bd33b1b62b0ec35127499516cfa256544395fde2896d64c663bb25", 0xbb}, {&(0x7f00000012c0)="f64534ec24a61499659572f7a1571653c3e4370ab7dd74fbc58554ac8b423c8d8a6e35634674ede8720aa2191ba8451fdaa0768de441b2abfa35ef9c0455d6d51abd2be90ac7c733309c6d7d8bcb6afe158e35d26a3ea0dfaae985d1791225e9c9e5f6a996ced42ab76bc223f531595dafc84e30736085d8c132a4fb8e7eba9b633cf5da2498cb2bb3d3cac91595e8adbba7a5847038a1e50688392a79436db7a777fbddd4f8b1605c027142e606abc494297df453c171289ecb496ee1a94903df02355b2e0745b002d772faccfcb67739778e3905fd9c86b3754d6785ae38ff79a4", 0xe2}, {&(0x7f00000025c0)="394725042517980e7b6e6e881573e685b99391e5a537435b24298e91c898cd5e035f06e4d6bcb8b3661c3fde64d1106fcc1d23100e6f356cbde61f3080bd0ce57280f7f63512d64e0840ef5efbb4e5010b7f39781484b18224db04e7df98794d3765f324353baf5d502c21fe58bf54bf6b2827bf2d5193be13a648f1e9f782002fac5c5a984323f66ded8bcee72056dd1b12d94ca2e205c86b7c3d5bc92129c33327bffe8c5f3cc7b2eff971272dcc159a05500f0b3adfcad5f1d06801f87f7d54c8c9a0904e87e9bf855013795c63a5cd14471997e7ea2191bb21a7453e731a653bc8c922d010059c01294b78c1b00f19bcd7878aa7a00d", 0xf8}, {&(0x7f00000014c0)="f76a5563dc951d772e9f4ec11ee1248ef7482ce6ebc305aa76b09c003a50df44abf0d864ccee6e783e7c70892c7eaef7c610dc7d39409853c5a4794e23ea6e7d2ebf01ad40c3480940e88f7728edd972c9399fc98f", 0x55}, {&(0x7f0000002740)="1127339651ff6d39341c2f659b2d19438a9f5e1ac852c632582b75965cd7a4c9ba88f160aa4c3322673345e4fad3048dbd3224f3ebd4676a2d28f3af5f742a72e1ae44cf6533fa78fa044b66cbcb0385e3eebbfeae070057ddd257056a75df22f5ee2864929d8809b79d113793dccd36ec7d88c6aa35d4075e9dd363bd1e3473b22561c79a0fa94e350a22f33279f7cbb3dcbadd1c7bef6ae9f676b1d3", 0x9d}], 0x5, &(0x7f0000002880)=ANY=[@ANYBLOB="5800000000000000060000000800000052e549da4470ab5153bd35f5a51afd9defc59b7e7a24ff67c9c7048c99cc06f32600de9d7661ace8f38306e514746d29e52c263e160c4488ea523276818df9fc6b0000000000000070000000000000000f01000080000000a7f4bcf907abdd49fc7f8d4f152661ec53163cd29703d7033fc228c04111bf6df54fa703b41f2fbefee8c2e3b93ff1e158fbf1f9d399bbdd899f7641a4c7c68b11873844b4b018f6159c2d6891b0d1f498eaeb34d921df6c20a8f48493d8a6225900000000000000"], 0xd0}}, {{&(0x7f0000002980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x1, 0x1, 0x3, 0x3}}, 0x80, 0x0}}], 0x3, 0x41)
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x5e, 0x401, 0x0, 0x25dfdbfe, "", [@nested={0x4, 0x107}]}, 0x14}], 0x1}, 0x40) (async)
r1 = socket$inet(0x2, 0x80001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000640)=ANY=[], 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f0000009dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009d80)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x93d4, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d88, 0x3, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x5fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x320, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "72e8b7f87b2d9efa9fcd55f97573403115e528806e28aac42aed14476d12a0edf3b5b58f69fea379a1ab5a903f52fcfb58a3262186a2bfff47a016f9ba1a08461da66fd4589af9e3ca04dbbdced7970e9cc45c3371b3625cc0f8032fc75e8f67590eed24a2ac52afca1d9c148457085bb738e4528a15b9018ab5baaf79cdb2978b4b30050f7e1db57bc19ef42fc16da3dfbaa78ca71dad57a8135ebc5794cf04b442bb9081c39fae5cf7aa90b8f00b60aa3c795f325a4e7810c0c1a3de9cda88a7ca6ed9b3dacd228a49af991fa218eb79bd"}, @NFTA_DATA_VALUE={0xbc, 0x1, "2372a19d837a1ef7a8c69fb87a820e12301e4054ca850254e94cbdc58a0726215cd8da1dffa9f8a7f1292144500864acc5800d9d1e2fde6289b2e4382c2087e88f3b16984edf039f0bf8e4e681a021b49058dc2bb2e9d73031dd8ec59e25978ff1b8a126094b40cdcd9132833eb65c11a41f85e4f07a48917543cd02ec1b725280d66eab4b0c235d5113cf87a216f46963de089828e21508425d740d5b2cbca0ad6e31934785692101b7ce68ef04b25f743a5fc4e8779677"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "f89faf4c040e9a0fe3b60a25a166fe6aaa0e40b88468d63f557a47e3a58a0ace37c4165345223360b1ff5c7c5ba23bc00d04ae90e93f2560c5c9ac0438fd13190b4cba792c3b49308a15111fd5d0e41f8c3d394379933eb04cdb1f56782676aac9d009bef8edde0cfea55d4c08fe70e64481c1c528d8540bae03f9ff8a3319dff1beb31d46704ef7"}, @NFTA_DATA_VALUE={0x77, 0x1, "6b6cd9bed211d265da2e725b0db159d16d90b39b73d12dfca04e69792d6fd7d7bf1e89b50e1033e98c6cf8656b9481f998b90111bf1a86d1512d3a2934418890e027c3c6f6de4391323ca1cedef11bcfeee1a1c3cd930566513d64668e72099acbf358ef376c5948cb66d3e893a5c6fbb8ca42"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_KEY={0x28c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x31, 0x1, "8f2ec5718e2d11d51c42f86ed66d5e656869b773a44c366d1fc3222c4931275f15dfd1006c7733a3d85f82f901"}, @NFTA_DATA_VALUE={0xa8, 0x1, "8e9716ee2e08bc26114e53f7ab160a67c0a818856e2493278233f6eb495c6969c14a7a7febbe77903710e5e15908f122dbbfebbaf1fa4fa5bbded0453b57cc0a09279ba06b1f4487aab6c5de9cd8901e57d9a5f445e20f4f78e85a10e4473806468de9de1dd2915c113c2947bda1328859247f974cf221fb6403a491a77c1b9fb6a150aecf1a2549303fce6eaf872f48b2aedec3b14a31fe118049090612c93b5fb2d0f2"}, @NFTA_DATA_VALUE={0x83, 0x1, "1df8c9cb16de8058ed141411a992daeb8cd7d2019b8bcac6b5792646e41c006b96fc1d8f1bbe6bd8b40e84e143bcb69d11795a3f34d9bceaf2da5d5e14e1a7bbdb7bf9754b20c29946b235d8cad162e4cd9afe9f6b5919e411023d711024994d4709811d3e03000bf3b929ef15c1d4a137921d0cdbd314c4e01598872fe0e2"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "2eca5edbb603a957cc5d498aac502f230e8f22ec148e960b7d5105dca5bc6e3531a032f5e594cc2579276deda3da584172b7fb1b8094b44630d85c6b4c42bd2b071a5b344df36fa13b61d2b517b5fca3c2af2b056ce5bd7274bc02f5b36d5f6ef1f2290f6502193dcf4f441a9ed3546cc4dfc784620352109eafc64f236c397df406cfdc1ffc0efd12f0a74cfff8fa1465b41ba216e7"}]}, @NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "3c0a7d58eed20480080b57cd419cd2fc5e52b6bca4115f36626d5a0fa9c9b7ad5365224cd1"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x120, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "700300986f44af1ba36aeb9f696a64ce1222db7466f6cc"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x54, 0x1, "dacb397fae28c45521696b8971fbd960efde75dfffd31c244e401c0b88627f8629cc98c6a30447c7a0357ce78949a3a7ae1f8c5c27fa6e91c6605c800ba431e9e7e53bb5dcd10a620c8fe508c103d28a"}]}]}, {0x13dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "d96420b67b9ec90e9d318f4495e30801d80b025bd6d92f956a61c9bff8db9659c49c760b65239cdfff776af90ce19f43742767843d7552ba1895c3b3207b1274547b5b6223a3aae176aecd8ebf67e00873a8aebe22608941afb6cc5888fef5d9"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x62}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xec, 0x6, 0x1, 0x0, "47edc71877e80ca387c8885c3c03f8963aa7e42cdc3065186e71a9505ad1a0f1ace49d288065839f673ab9304956e812211857a9f7f613c98217e9be0e0124cc4a0263aa14155dd503bf620e587f3a42749f5d167d427a68c72baf7a3be0d70266ecb6cff28c267a1ef7975b38fb37d88bac91fda3e96d79c680fe5e6b16389de093c219aacde95377fac53a01e320fee475db3703cd77c23b8d01e9da5191ec9b69c3eca3f78980e5e1378383c11a4794834c82811aeeca0edef353d73366bf0737a6160e4fe45898682754dba9d03d2a5e277e82e885a7092212a95cbbb0c548dd70cc8849d0dc"}, @NFTA_SET_ELEM_KEY_END={0x1264, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "3a60d196404db46b072695053f8f06eb2547874e1c2a64ec543f3fe5a52340f0977f22b42fb5f1c048de33d30edbae419ea4c55647d925ce21acbb9a5f987f6d3a6ce4e1fe4e860b6373702a3a4e3344e117a21cfd2b825d0e4698fefdc63de21431f9b576cf48b1c61aba29afda79d31a8797d5e3dcb7bcc0dc9b3f12c39540bebcf10b697daf79e5b1758ddc81f5a18ade7ef9da174f514d3ed1d929a595e7c6a5e9e4831556"}, @NFTA_DATA_VALUE={0x1c, 0x1, "77c21fd2019929781fd8ff24ba142ab6721835f1e3306321"}, @NFTA_DATA_VALUE={0x8d, 0x1, "e6a30f1e4142031412e2dd9bfa6f40c8db3812e94291129ab3a6f458a55c6bf32618f0ff20a57680a3d3be8f1d9de386325fd85979d4e50fff101e2dd8ddd24498dcc344fe3ca4c29b5539284ac4cbc20b10a5b3a3ca24bff248280c042fc966a769e39893abb015e5684f3004359c598f36327f5823155393e5074006d79555695881f909afe923b0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "72cf7a4e77f62da771b37bfeb3740549f4262e6a2cf510b3b542245ce47271ec1c17b39ee1bee4c59316bae28876f0eee0d16937fddfda4d72e0ea294ffef9e1eb5a19b15fb33453b937bf3018176cf388a02bd4354f0b8d747e21a7b323f04799fd0b61e5c1e1dae8aaeed301b7fc5057627b6e9e34f171b0cad6532c44808f48cfa022a5f50938efe39581ae83704b80cbaa9fcc6084f1c5f5e297d2b2f79a9f12ba1555c75af70bd981892743b544043729b81f9a3f7664bada703bcd422d81a46d561e41503a20c3f1d22e98ceeef739264846b64ae6f7c73693e1dcdcb5e33a3f6c1642d42729346a818064feeef354a27927b683d71dfbe02318c370c6ec933d867c468f19a42e04f29078258f43baaeae2186d2dbe90f584155fb4d2a1816d3ea048b8e9021efae093ee2c0f8f8808a24c91c0c1709742e5cfe86a1724bee170235fba617308611e3dfc6cd4193b175d4db0f8dae26d4be5705fbf324af497cc6134813a0cd333a12b31da09fc17faf80efc242d77c72886ccddbce4ba1a5a04c47c8da8759776fbf38af5ad7ea9721fad8be6ccc58c2e52faa27a3484ba485bec982d39c26b6d913fbf4d1d6ae699c43fbf8d678384ddc959b0921513e7477f29357ac28b9f6cc7523e2c19ad3de10617c36314f5bc539727502565e0b951dac7aa58ea35fcbad4593f2fa098ec10c8305f206192566d92c1cd69d2739b8206585375b367ae7209f1561ec7cca1c5ca32de62928ac4fde19d8f8c856937857073d57b852340c25abd43a038e30efab28535d0d879ad0d9d2ba79690d74dda20218994ee3afa53fd5a16086e1709385b86e0eaf3c9c00625a537d4940110effedcb08b6fe61a2d272cb0a45e74adeb4a8bc23fbc8e2f28f1e85250abdb7741d903fd387d5ee365410e3bdc9ae1c0bdc9e2c22164c6743a0bfbd32914532044980ae0c12260318f2fd46161a2ce87679bb0ed510471b475e8c36eb3b6bd4b9cb8105ddd2bf222620de4d975a79b3b9e2162685c95df3904af8b9a471096a7301b556866f2133f146e8f5e54ed729b634ea0dff975399426380f78a8c991c48d7624b5fe911f2a7ef0070d11aa25e62703fffc4aec0f155585b6c578e6e2138727ae57e2049eb9e220db1a6e6c08fb9c09dbd873daf1a6aa00687b0efe7c8705cc26b288437bb04525a36b8685c621656c9b89c716cdf8fc8589911267274ae1a02fefe27546aa0f3f2d3790c8cfabfbc21739ee39f0eb9e3286e19355dfe1dc8b9344ab41db891fccd01451d023e4199e6ad4cea914a1c925397852f159c340d1299d23a47d3782780858b7424f6a8d9248f3bbb38fac26ff8f9393ac975643d8c032276de7a565a12a9d78bfdea8339bb4348b54e31ab93edba1be2fc1e54062ade000c23d4624f82a8137c5ca18b6ed974c252c8e31820f10f982e997caf75fe6de09cbd0a72555e74c9613a03b88cd35a22d8225fcf3d8a0a92235916d6550497abed67b6bdca7c3d2ef2624d3199efb017ce7b0f251097100805f155ad663b434c2b9d7bc7af34f882ba7da8d5f361b47141aa9d94306e30d4e0a115827bdb0114d3ec54ff2edeb9868ef18ed05148e82726d3a449bacbea9bcf9f0552c7f9782cf018ac3365b76271a7664daa451b1642d14eee9263b6466b5392dfe043b280fc2f9a368af234b41d66a0a922ec7c20490fd74735d37bfdcecb8532f595a42d463a1cdbcc343a033e2185a72a0df9b0feeb58d10a75df37b49442710714798fcb1ea38586bc77ab83caff07fbf2334cf44d736675220db43959ae61eb0b1ce686e855e0d515660829c41610f56a83d47d28b70569ff8b4ab03435f4cf3a91b02de1fa497fad8a22640bd613f9ec7b8a6109e0f701b58420af385cd54ee7f0751f38016c560d057d5edf2ea78a97733bdaa0c4e0de48a7bf851bd7c680373fc09e8333528d95a13f4b763f0485c27aa0afd5c441ac5a9b3648f5af2a014b36c609711271c6576c72d15c5f59c6f08581b6dc0a824d3aed68525870d6a96cb0449b798d5340ec996fafc8b5a836aafc4ef1680e29ffe28c46da90da4ec324ea7b479d79783b27a6f4095bc645ef17084311e649d6bef4a253389c1fa26fe34143641ba4eacdd8762555b6d3840beec2c57a5c68c017da53fcda996733150d8b06873b20ec8df5a798285e4f563a0f9b58a1bfe2174fce0f9f43f33a7b4d826da64a5ba30e607ba863d5ad1fb92e8a7dd9657c12a6dd6d67a605602a2a1923ca7c9684de4347835e989d0cdae743275bb2c8e81b1a8c471c9dabf75bde1d890453d798aa36353dbc7120c01f8f5253926199c0e20390189f3363a58d15598a59268d168c810c2898ca28aa42e1c4f1fb4d94848037815e677477c3b10dbf0233d1ac5457d23281336f23d00145ca0a21228546172284ae1d6d4f50dd382312ab1121debd0d58de9c13d4cc1eaba00b0d12a11a42c332061242c4a960180de88f343329937d3c755714fb9fe9c9e78bfa8315b30a364e831fe278e796b3c8bd6fbef41492f3b24c8e70627b428920922ed5155e8355c008f37664ae9045ecdf3ce292bd9aaf4c8ad14dc0c89b648946326c92a32dad833fb35df7181f27cea71948f7090199625418eb710568251d4d70bfca0aeb5465543897f14c6dc5f3600de29b1ec8f130f3504662c2085149a05d827c8f9e1335c1876ca656b4eec9e303c042940962b01a3a033f39b88701d514bb306d0e8d3790494802858090c8b4671b8696f1d74486dbc554a66b3ca4333d0e717034361ada40b98bfa97817d09cbbfa6b999a4b725ee68e48e5563fa9eb25ae6e61f6968f314e40884f620f6d6d21683b48b081a9e79e39e23032709926946103eabe0b729deaa6c6b75933698cf96fda3064a22e7f3ceaa2e8fcd5ec40b6127033d92d53f9369003dc906ae0a0d76728fd6bf7d66fdfcd12af37f5cf4224dc8dc9458a4eede0aeae06a0b48ca8a9788368dfa85fa640813cb9c2a16906c93a460c91974b551f385d8397e33a853f7fbeaf778490ded60f540a2a8d48fb8aea17e3517bf3f9393399c3d55d3b747a8de1f9dfe8fde245d19c510e27847bd693c553ae7d018c140636964d2aacb52ab3f0eb055119628e654dd6cc4b824672f03a1b17e1e612486bdb08588c6a98615a61ca76a73d74b6179aa89e9d40f6b647f89bc29bd5659510d72a3afed54c4407073672c9201bd3d8f4b66ba12f224669b04eb0d668213f1a65031c2293c64169b6811de62eb98017a6db1409d57bb55dd15c58af84055421f8766b3e009d62d3fe4119570725268351fe96911bc1daf90b45209c68fa9c1a632430168ec2956765b59d0cefc03d9a9d3aa5296434e9f4b926cdb7ea5dcddf0aa7f64e7854f60a737537c660226b46ec8625910617e68557f40b7813c83520f86858f8711714b6c3c2d82a2908d545bd501c79b0623d94b0bcc203e423b1c7539edde899290b4723eef9c3be9043245cc8e811f1b8a1cb62a6216aa492d1933c2a26024c507034dcc92e1716fa88748c501ce28242b03a44530dc2cfb43f1b72e9853cdd8cfadf989eb6d44f759988ac6f9a484020ff4ae7e009fbcdc49c0c20fdc2f6f790eaafd8ddb309341476898118dd5f5664ad686d09e2cb8a2a423fb12ef2e496916610e76ba7cb0e6a83ad174ea60519263bc135f4e7a8985575bec2c40e040e4d2a0631cbd6da83f7348e5a9594c93d2333a94223c11faaca66f451f67e0eb66da4c4251dc8fc37173860b8078dd29f3e67764e5ca29bbf96c27f138ce10641dd7f0f72c3ebd1e7f39547d0306e283aa5f39270194d271819b7734c6e04a91269dac0fd905521ba24b4fe71263036ff62635153b5863528cdc890a7e4ac22a72128606ada3ac2398aa235ad66a77efdc74a88183e452210502e223861bd48570cc0a224143bfbb50585db7c710119b8a410c033371bc860538bd01ee98a470d6ae4f035fd41135e5c39e9d2fd39453d6a9124cae0bfa92b8c805181d99537f7c7bf1f32d3a120304031ecd85fbc43db4ce96eacaa077d30937b6ad7523d8b515d3d4307b8be17b46c3e6a752e652d2654a6ea54e2924efbb311998166c8289f8e8cea2a6009efc92ae21ddf75f0537a6bbb76108dcd5cf19b4920e713358e6ff21255b757b3a9b0e61a146dba2e0cd81cd68a54a35044dc840e087c0046fcead00d69580d263ce745b444bde18768de0c5e93f7cb584f7f7803bfa66774b88be57cd6d68b7be6679404b526dd75a24a8db6805476525e9a6eab9aae065f2896028e1e4af0586e2ae595eb7254db7daa94a1815ee628102f76dcd96a4a69aa42b3fb34af2d0aca58a387e8a9070b8bffbf2647966757e5b63fff6603f8ff75a5ad9f6dede907d693a3f11cb19ecc277ab7f2036230a660d46f6bb4c66d9c99c0d62c720d638e46f2da1c27ca71aa7dbc40a8153311b47bdc50685f6838255cbe11048fb807fbd663724c92b26ec62e9d4cf6f9e41d2b941a1b5a933cc25a96e4e08ca2e1b858cbb78548606f9d285eb4abc3484aaef04c0f26a4dcd87bbe2c4a022308563b7dd44c110268ae00d984101e795f9d291cc0f74e3a063b2bf03dd672c083a1c0c79f66a7e8bbb7244a03f6e35bbb3379273b7d2a03284217e3c78fc99d395440483a423fb67bcb0c2e89de89a4fe2798176077e258d249770dfdd785659f21b417e244d4655dffaa81590ca6154efa2552339821443fcd4539a2bd281f9121d12981705875acccbb77ed4ce035b7ac231b1826b1c6398e6ee723344b5a1627ae3c6b765a4ae835d787454dd1965fb9192beeaa7eba3b1154b8a7e89130de02742502d8063a4b4c917d52c74f35cf6077a11762e3d3ce7c5796cde65c6c29dd953d5be45bf832f2f90635e3de4f395ce935895f22f01fb2ad2889bbe1eecb00f8b6b4b83d911a0b4d98e470f0ec77faf87a79975daa93df66397902ad0893bf9708e5ebd96c197c2b7f7aa991f8e1017f1dc92aafd8cfdefca2aa0609491302e722d811874e70e26014bbd45643f1eca48524be4038228c12091959ebf30cfb4dc4fea62c2706c3c0efdc0a26195d6a79f3875a48941bc564630d3e798cebda661bb9c7ace67b0d42f7743063b87407842fc3f01be313a31be40dffcb0e80a80491460dbc9d489e69dc91c7d5dcb90c4fbe5bd25333b5329f71da094916457cc3e38492225753421cd0b8571ee8d7356a69db42c77c4e444c17130066bd23b8784e44bb5400856d387f1175e85fce5a73f611cb4000cea08f82d70c00505cacdb2028537b4aba815d2ad4ca540711dcb5749305208cf94220aa46f57570a47fe6deddebd3e06cf2a584c6b5f996eca0db3b12f1467c98ebd6c2545b2634eaa95a4ac55e7310485cf74b5745d95193b20333220eb66426ec908c6ebdf76eaa2d6a88d135c0b8e63365961937d34b8026181ecc4ce0326222b40eb65ecab9cb1e22196a3f43045b300f7859f09a24b054f19188e3dad52882e10a773dcdad0cb45fce61f3a697be2fd1a5b297a4c92618bf650928569ee6bf9c67a4172d64fe6d1432033047a1236fb3e87e701e88106adef77ba5d65224987bcf8de076b01aa86eebea33b8643909bc396403461e6946c38074f6819d8ef4445ba36cd00e776c86ef7c6c0628369637c4d0b892600965c8b9ca971da65c1f4a0513760b32199601c85ca94f6bd99abf8371963b44e11c210e31b1bfa26cb499637b1322137471ee371f6ef9897f91f20ca632aa5f81c3dee399f84e82c2e5757"}, @NFTA_DATA_VALUE={0x2d, 0x1, "c78b7eb5f9fc07f7475850d6faa6f59a297d4202ee054884c6cdea8c63066fb273efdfaa5b8f9be9d9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa52e}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90e37b999312c9e3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x132c, 0x3, 0x0, 0x1, [{0x11e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xac, 0x1, "2e04eef407175c0041f4d473dd12394a26d2d17d65241ef411251d5855ff689de7d32551584f149b71a506fda8349ff57b4dd6f3adaa9d8698459284815065ad63c2bece44a1aba4d6b220c79564222d2ea0ad7dc829a0b0b77a19016b655c73c83fba90181cadacf502f9376102cb1b12cbd5f64280f7c99fda4c44072172dcd9ea59f076d3a26829dc50be8faa051ddf837ef75d2e121e4b07a99b84074fd40ee27f62ef92e230"}, @NFTA_DATA_VALUE={0xed, 0x1, "671eca1ef42bbd4c4f3224f130974387de2d2d2899ad66fea10c3885e976c4f25d5e9f6bca5c0e9df6c4b23413963f0e717b961ea5d04d7e46bf887a65e51c3e571bb169c6cc516ce9e54cbaf185e3523c0568d59ec82e06da50c77c623c2339062b5c7c16b004eb3277fa67c01d0915c46b6c5d19f060d71b0e8ca81e3c791f639243e0f0634091ef98839ed35e55b8a8333fc1779d7f2c5f97839f3cdadcd1265f54595ce84b86a399a91f37e7957ff086339e53206ca8d3fb3f5263f32455eae2ee84f35d4fcc5d4d2d22367862f9e800b5e5464d74ddb2faee5a53d6bed50e4af7d1866d88be9e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "3fa4edc8fbcabbd33ee26715213223920a25f2ddbcda066ba7579f76cd76aedcfd58e7ee70465c94493fd7f73ae8a9964287f7bcd9a1862f93be037af9fa385267854d7a0bd1a8dca77f100255f3a0a4a146041427ca187f799b40bb3e27c6653920f4092f369c61262bb8cb5b417f85091463f48f4ddfc7ffb71caaa27dbd5a4c768b614c52ac5660848e9b4b611458b7abfb9a733ca1705ffd12090f480f890aaacbc2b3a5c0a2b40343c814e1d463fa6d5d37a7d2f8ae3bfd1e5f14ca3dc6a57a5464424d64ffa786e58e7e9215facfc91758051cb9458a9de5205dabb8f38cf3d2b614d54bad6367cff23320dfac02ee634e8cd9f4f711644a3f80dfd4272383720db6a0ca0e336275784682adb7716cd28e767893e574ef99e12e239d89ef7eed31974cf22319544da16f04d7b1a8196ab3c46788dd8b13deb2447ff0ca081e60e215c91859d2fce7dfcab889e2578565d0f8022ed7efc5cb18abf178a8f37554e79489b9ab61a9324dedef13afcd58ea12fd5bf3e9b15850aafbf284076337428b8d3cb3dd690cf0a1941842afb7ab16f62ca860494d2537c3afe1a022c933421940438920b61f868d6ff5644ee0265c35897ff72c8c9a4ffdb99ac427a000d533d67001fe888cc49ac251ed77cdd0d6d17af2524f311f814d4f9c9c2abe3b357472f57c906199298e3f9a25d8561f36b2a67716dd9cfceb6dc691759755352d24c529582057a8e7e97b5bbca64e83d7cc6a9eec51b2cd0c95af2e182da8f7a070e197e43cb9702feb452247f373d26c7225f59bbe8067826fd8e767d099a9cf50f912db658f850139061b3dc6d9531632698352d6f89922a2f81d06c886454e609bb4d66db956daed4ace8483cde65310c19af56103011f00c49ccc1008b5465b595aef3d28894f8b93a589c78e5bf31b2d146c479c6c86ea9bcc6aaa35052521c8d58407c95d278db750854168cd4869e359c302bbf7dbc5b5355b9e6ed52f8c6b25e11d584565aa3e391fcd3b03f46480b53700b5a53666187fab3aee583223232649b2d4c0bbccae63f454d6bad6a9b01465dc8e74a239d74f232f8322e2e958671acae0dfc4004f9bf56f05b26dd4f7bdd7941d7508fcb4b9226120a3e71919ce9d93d8985c8a28c428e7f7bf50a58c9bdd6fd99f908c97fe15d4e64688814870a3ff265059b590b79469befdf75b29ee09edcadac48219da4260494c61ccd3339186386d116824a6d4783459d4c4d92f9a4a5d52370910e8587301bb17eb5db3be0eb650a28f049b4d752972680bc2e1387b51063b940a836f92e6ee3d09e5456d3e43834c50a225aec22f9ad61e23f7ac74cd9475d37e2ff879b7bcb5ddf29c0424abee45c9b4c8e528f659e82ce75f0e9275a9ef619dc34082047d8e82a03493a00ca646ca7e5a2f63e5044f5fcb847096d70c846aae4f85be8819d316ed3a341cfc1502122e3c9d0455e0576b694f93a7642fdd7d9a13c29570dbe54344f8bb6020e210ca4ea130ef32f774610c6c1ecfb359e5ab26c4efe7222c34c39b092b3f08032ed027bcd76cf41df82ff95e4d3ffb11be2047054fe99eec22bc84820e6196b2c440ddd58190e42118cb6bbf8544544403c1973dd37c6fd5c9b55cbe6b54ba8c3e7d2c58dccc456e2d3de1f9723f7538c07b776c6ce71ef8c3621d9d47c801524042af474949e5fd21a68c371b66d86526446ea9ee34077dfb71d3fa6565caa882c0a102b2c55f0bcd7678e8fe0825cbee0a6580d9eddd3db44187d69d361bc5348206268bcedef898bc960d7b2f0d9390e296e90564680a251834508c39f3ff9a3bba3490ed8cd082b670b03cf014d7dab74789da0cd9856cc3914b6cececcad91cb7bae0fe99643f66f97cf971065748284af9db1e47651a9887561ef3906e26940e1b18c6a2f8d6e5d700e6bab3ab3c051f4aec5a8ed606509613292d1fc0110dbc3d75549b0bc119795c162cd79fae78f9ff37a234cb3b329a08525ddcb0cf2b86c024ca3cc07a5651392e44f44b18d57b422dc312ceef76ad84f8988fcfee50320bd52be41554ec50278a12a2c5d5591cf1a8939546c9f4da1ebe54d4eace4aea4221238ddb42d5a16d44c2b802b292a8fa76b48177f62b2a36f6b458c85af3a6b3f5036046497623bf51ee3d57593f0676b871bd1c017e01044cbeb359e4320745ab34ff3e29490fe1c459ce69d2186ab3ad48aa41ad755375d4e8de5aa08f802db2d166c2b153239fdde296dc2c77dff73de57c28e7e09a8c1d06174c21c783795cc12297c5e61df7ecf60014d9d4e394d9a0df750fc31f0b1de3d0b5bd6a42bd4f423ae54270a02abb8d5cfc3eab207fd2e52f814f061234bd360fe769fd1929ef6999a82c479eb9d706b6c15cf5ef76a847f7708315607d783748221b409152ae21e00afde8d4fac3f4aa4df0365682f4731706d1d96e5f8921c46606b32f9e828cb4ad1235b360621298d7ab6588bebf91f857919e930cc2ff4ef67fdeeb84c6bc22afb4d7249d756bec1843d25f129a13fc23a866146b8852417e99098750c09e6edfc28eb51d6a2423d99e52dcf67ab3b2fab0fc4375468e025029741a1d790d5378b8265d527dfab4cc64060f591b900f1a03392ac0d6f9a8ca5f339d6bc61bde14e47eed16bc2a99a72fb8b188dec5cc47aff936a931e0f69a50940874816571622c80735cfc31bbab6d05f41cc929c7a7a8d3bb0c16a7583618f566017d6b4a6fe848820ca6c38d580fb4f6f54836cfb441b49ebcac6774dc556b10083c4a40ce555a1647372ce284283a8a7dad3cf8e65b93fcfd28e3b4bb5aac73cbd7907fd8204b35858b60c073dfffb36640b658f0dfac3d06bd3ec367023225ac89fb5172aee2d8c151b64a67cbfb201847d88a1125615b1c36043bdb6876dd343d7f295010f88e9f7d2a1817d7b6fa30e455e538d49dac74713e0ef2248994fe19088ef5cf516a8737fe90b4e3d26e91d1fa8449a3e35c5406d5c30fbf0aba055c7cd6589127f97caf1451020a65aa56dc8437df93e58239d46f847eda37fe5cbddd03f590bfdbfb03ff49c8b2ba47b6bc2ca61fd780f54844da8c5b3aee33a6ee30eb78facb7399efac8384aef8eda3e7f994325083d49f12bd10af20932e53b66ace949a5eac8bb3ad7c4eb139ffeaa81bbf50917466342a08e2a0ef6af7dabfe8223a56fcbdb78b85dff2677b2b46b10712cedf3380f3bb9b482a70f929a2d0da5f85387d65150d74001f5df1a8cdf4816cd4880e5f51f899d966a75d4ecf3a28e387fafa5c1f10e0512b11bef8d2a85586fb297f5717c042911eca06557dbd9903f76d87fd0f870915ba57ac47548f115f2094635e2d8786f41093ce56344df3aa3821c780d1c0f3ee06e11f1d5418589f7fbfa59281cef192eb0b91b66af44b63fa6d4803ed5ef84822d0b72d780f70d8b4f2d43421890550733dcdd8c0c310a45f4535d27243f9a7f0624a474e37fe4aeeb2248c4a929777e2b74c63b3bec50e78b03e9990caac643f68d11b0c1882b27e8ed107de6ba947cce2baad814f1a7decd005d06266e5b350a6e387c103868fcb0e1208d45ee3bcf8e7cd7ca8b2fc76fa16613f26b749f358de67ee71d99f8ea039d63a127d8150568a6ef9e417344fc12f9f55977edb1e01a132dafc0c320f3f1bf6f88502c59cacd7848ad062272ea6465f04e37880b5701e7e6c95341589e2a3ab8ebb4d4a7118ec7d58d14fe1840e026c25afe3d2edc00cb4e79e0dd805cf9a7ce4b6d6fbce567dbf545bd442a9b0774e450fabe7086aa206c19abfd98437981abd742c6cea6cab65b546809e65a8065c5b6c201ab93345ac5faaba475a4842a189d847060867fb1c4fa4ca0e57db16aba03b5ee499824861a24037f5a5a15e32786e004e2a3f77662ed8ea1c78433e69cc0addb572fa8729706aadf639556cc54d153df241ee3ed98a76f1efff899682abf881e2686af0d57063a2462ec77deb0152e3c7f813eb0cbaa5dca73429fee661eebff9d0018f8a59a200d785e13695d3809f607c0d6c990c9ae42e6c663bd8ad840ae2b7032703ca3cd774f50dd9c652c07ec0aa256947203d6f949ac16009c09b2f4e6acf0a954a4d52bbb50c1d62be1e49bd38951d5a8321c7f15fffcaf79cf5972826e0157691fcb05a3dd22fcf6505523d06d370f7847e33c3d1f1bf9629447e42264218f3b94557e0bef90b648ae3f2152b4c029ce0ac9e65807b0fc2734acc350de986187168fd6a8d1781a82c6f2cf1cfa513fecb978b9bef13ea6120d6664871fbf6a4de3e48c2d16a17728b560f2d29b0c85fea337a52567e8a3f37910ee4e3a3388628c1743cddb1ae23cc3e90f8c51fb754882e29b0bede05177cccfe480761e50619d2278e26c2fb06c4cd9707c5b2bc3d0ba8bc7ec355e607f8396553b023f0f35b102074f97b7844ac0c67c6da9fd1a4ac7c384d6f0b6f19ed0a097218898c58b9fadcfe34d4979a1c3d1d80a4f53e037a6282a27de5ab73f93cfa67bfdac7f8579053d6307bf5c37c9fba33d4fe64a046f424df01833134b3dd8607ad2551dd8cb894bca5759c4e51778fef5a13bf71c40926dbeec16631146db5e0d53700ea3bee84a3341bf8f37949459a8c8aa8da7445aaa71b0565c6b8d857355b71abd5988b710fd3872da7d54c4251b51c60acea5fdcae6bd7c773dfab71c9616e5c2709a57bd59a982014187f97174cdebf872bf3cfcb18f45d4f5e2b222a7b0d805a94c024ce521c117d857c1a29887ec713df04efa0d1642cc810a2830a014ddc2ca7b89ff6d3301b341d352ba741effc7b6a4dff20fe90fd233c2defcf31cb7442074ec36615ecf7706bd0d10286039647fd95a1102833bbf988db36ed82347f97a67a390783b37b7ff3999c76742b73d4923bbec03c6b53a34786817237fc022fdc1d6919ecdb4a84f4329e312d176c721afc4d2e7e067f5de980c5f9bf64a809bf16c5dce80b23244f5e2bee75f392840b02dfe4a3ff1295e811726c7aa2003ad725a0e7794ad4cbcc0a155e08cb692f54cc4e4301921d57eb538f6993cd0f1af1423f9ba7773b5156d2c19c16640a3dd4a70afc51a95b945ee4b5a501d2f730ef295e5de3999c89be8b1cf2cf8e0c4cf11f5c14e13c7e3254ecc48c247e23a65128c7c00ae8d7b71e20d0acbac9adc660220bf5755e6f52c62c1a0e4a7975253dde89ddd2acb4ca61cc26b4efe91ffd7030ff81451a03733c6a19d9636b0ab01a2523c8d323397fc620e2fca03e718b4063f8fd5d6abb73b959ed4d99651fcfe4b2afb83bb4b000b0ae4d5c1208a0aeac146bd8255bf4378efda4b6baba6f266cf7fb820315a09b9a07016aeffd68226c41b942c1947f1d6149c6eac83cebe9145fd80f6099c28e34a344466bdf42472efb04a16bab7e87a95312c2835aa9f5e8e889f4b89ee16fce7b43e97c523fd323181e2e5c0da850bf0bb297d3164e452b584b3f17499dd5dda47f4230aaad6b769ad079624860556116c177647a64a4d8632f2f9b0ee3547e963d7aa8852b0e052ed63297d15bb6638fea311a16f0b66bdcf8a58d967387d25d4366ed0a01a0180caaa1d12ffb13f583f7a1c27043b3be95fe519e569889ef5793a2582b7ee9b409c5f52cffec4a22492be44a7d6a1944df59cc2e789fd8a9e4002e3c96e0891ce4d3ae4939d7ed2e9f7e7f27864aa8fc6f7b80c51ccc5f0860ff2ab951016dbb0e0823b5be0e2977d1f5839e6f940f9ca6483df63c1372b7febf3a153c117d24d320147bb43d0915b6157c436d0f1e649714f0"}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "30e48490168149c436142c5f7674c943cdaab87127a630c2b965cfa70effd148b8a01c5145c97ea9d323b288242b00962453c45e76d8494fe92ad26c88034539e43bf1ca77698d3b6eb8ba9e1275c630cebc35d31aa9df8d1d88ec75b4e4b8207cd1d0127bc9cfdd03b70a6bf2f5e5adf743cb3c4fd5cf2a9dcb6504c4f34ba8b2bc1d67a5c2a55afd0339ba55546e684784bbd8fbf1c09bc99009ca223a6396c3011b92ded6db47ef3ed54a59ce95c110fad47295a4a6a7b2b0cccba44b59a0350bf530d48c5cc82cb4edb863122784e31bbc32d0703a4b71ecbd705efd3ff9491639bb"}]}, @NFTA_SET_ELEM_USERDATA={0x33, 0x6, 0x1, 0x0, "6400b646c940a42cb69bb99d934074d4c364754eafb9201b9d8701b813292a977bda2678138094b8edf443bebd7f71"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3ad4, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, {0x33d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x3348, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xc0, 0x1, "5830f8b99b595ad682b5e2cee9cbb596d35b140ac9091dfb9d73a0c079c6a90bea99aa56b457a81713ddb6152768ef0e6bd9461f1e9c466197542e9eea8e832bfdfb0163333c64bffb72b453ca24e2cd585c62d3717c80bfb46130fcf8a4c0b6616a3be6e05f9c525aa91990829e165c827f45ae5095906ef25a5f110a56941d49182cb82d9dc54da4038b9945a4e1837029df09087d59ad199e4af43f85fdfcea5c3a22b91f1580f4ffe2c6af8e737e14885e3f1f430c4c9e03bfb4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "56c076a94699dc5999fb02af54cc43d2661886282777f39ed7da474911183c9fc3a2233f5e5433c76a58d425212c238d862ec2dcd4baa8b50359f586bf5b80e7b0dc13cf3d1eed324e81ee73e89bb941abdec7a3885c7b3e0c9213c6354fb74287664a969c7bf9b7cb5dd94408cfc2babb598132be50fa9ef65db10088a4ddfa9fa32019fdde9c633d04215b976bbcd2319a618a7e9dfb4b75d0892ea7abc4d78610c16e96ba5513875e250eed74bc3e96555aea5987e748b74d1b155c7664a535048a163cdb4d6d94a4737809f8220f3db6896848023779e2865d89aa3f2e0edd53"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "b6876346dba6362262fbd2f6cb7677549267f61b11700f0b58afcc330f4c3071b2451320c5b8f7bfe5802329d8888c4e20bba71b0ec63b50ec7c5e6ba76ced67d34a2132f55f76b56051ac5552ddb997fb244ae5dd52b817d528ba11a26046bd72aeff82fce363af635f8815adf41460e392feac7e4a2195a9239776f5f16a0f333ac6c3c4acc08f7143343b2abfee8eb4cdcc34ba3cec0dabce5cf84b568edc85f3e6fc5b3c281ca9d13ad6aa2c619429f19563b06785a4c8f1b546644bff596b1c9bd447ea27ddc26c60a09b6180f50b2f129ac160ed2b35a8f039a14cc5ae204a19d7741546403f9304b1669d2e75f94aee69c04c73a43548a0138fcd2a50bfb02ec5ba60a42045bd39baa65c43e4eefcbd472389a1314752994573140cf767ad00f56015284b955ace44f69c06ce64e63d95c50dc86347fed5a9bb8e5e7a13d7a03bb996e5b22960299e7538b75bc0b7f6057239abbf3e911f781f55e6127e9656f82da07e7248811147759c086207902d6e169a1b56ed9d35d0cba9db57c28a6d04f214ea98c3d48e5c0b9afdc0b07aac62b17e11f65f1c53838e441f729ab4f31d4f5fb8f2fbbf8c03d1eeaae388afd28a3fdb9367c6700bf8178b1f8b95634ac3432bd537f96079fd5b1357f5dc057628604d9ab59e91ce2341785b68d6bb8476fd9627fd34e65e619f7e46719ebe805d05cec168ee41c6fb4ce0d4e581511afd5c314009b4011f385c05b345eec93d5655333478f4c58d421495e93b2ffd69c3bd6d0b6df35b4e9c196474a30c6d0dd8130bfbd9cf89d62b48a200d904e2d231c824ddc4a2a12387da2960ca36b6ea9363428bba4a68346b9db1b06de324fdd2aca95b0dbb1088eaef96a9787974b167683dabd72214b42194a60dbba71ab0f3260d5a00d710c60e5957f8fb1369a57ccb2e65d715224036c8f901d10ad2ada2c1283372470b72a56048db1b97e49ad16f08778e1ab5d02e6317ac1d928832ce6ea28af6c64f85b8ec2bec031e930fc90d64c17e5a90d76feec5228a2fa3c83ad521dc0bf8d3cdf9e22f071035a3f03eb3eaa4d2cb90dfaab72e5acb6484badc9a2deb6a3a28187028ad74fdd716b5ca65e1d608fa694784835b5f1f61899d84417c11f6e5556628a4948bf46b41972a23ab994016e394f0e8df1294ed254582ee5a4b3a6cd43a3dc97717fa23f24c927e3cc8130c42b5b355057a207b657ba5f40863d0778323dbc7e1959e69a16b205b4ddaa3605556fbfefb8e10267a6a127d90884131f159abbd9a7472a1e4b07600ef71a2ffadba829cb7d20bd2b4a55f12b1e08f373fc1b56e8055c28800d71fdb6ce87203668492fa475a59b1eddcc771ed7abf0f2cfd46cb6c79b4aec0f648698af97793fc205162c783ae8d8c9802def8fd8453e9ede209ec85d304db0579b8e7183b284b565c3e02a2a1c429c03f9e6bdd9f925893b0986211e37a370ffab72d95b2db46202ffc47390a6022daf8f63b19cf697466a297da503c24d7b2fed1db31b088b478a7a100fc61b0efb795c04aa8cd267445346e2e50b1536e834b50b0c3397c33cf871e9d5d984b3ef0a8c4be457c142c7b11b8084a68e9b8bcd1d82881579505c53770b01dc49cd264298e67bbcefeaff16f5f739e9a7d34537d1d796958ca081ca24dbe7479547416799addb31343223595abfd8209c1bd4708a29d6b2bf76caa5f661eee38e685d284c8377aa4838b517329a4c0d3ce635544041dc49dd3c44d92edd82721cf5eb31d55c38bd0885a0b79a95ac397183308643044cf12a7931fb6db0bbd8fa5b27dc7a2ec5960479af1b7a4191e39855ffb2f4815faf7556387f7c84580a36cac067e9d41235c0261fe0d5be84a579e70ebe75db7b9746040e45567ba647fdfec12881faee7298355ad5bd7a9103204a02d6a80651d745e061efd62c9f9b5350e4b1d783c1bfd6295a4f835929b34af0109568a9bc73fe65bb0fe6c1727acf1873dfd4dea1f66adfb2e69cbfba5880534fd87d427a7d1b2939fda4f72088cc0c3b641d768b3d62c0446e61964b8976ca00794b562f0c056f8d58a9a251efd6f3d623c11056de3ae1a477140fbbd58d952a62ed1a3dadbf9da86506fb7b4e64e3875d2d58d5ef68e2d700b2c614ac9067fd5b30cc7668a7e42dca8317b65964bbd921b1511d3075169498d3630ce468f7dd158338b5e5dc7cc2decfffe73d02662276c1dc2d4092453a9526442f92e6462f56f0897b9b75922b261d4df97d8e33772c9df5a3c0d5d4d23ed41ed8d695be566ca6f38ea0f75dab2ec5d794ad55bc5e0cbd65e04afccf2b6b76074ac74ec4508024a0eeef64482c5a0406e9dfc5789f9ff91a36a31b44dfd48d9bd534c83a3860fd97e9aa71a25a2d069c85d5678bdcabed27cf5ce45f7c70d099f235bfb430e07f29aa13009fc8c648477fd04d65c49cb53fbdf05ecd10a8e93e58e08b52b0e3b64925d03e97451b7225dc0592b3d7b34958d71d88aeb4ae6c30e51321ba1b6924b3ee628ffabcfbdc9a0db9f3e1cf96f91c0daa9adb3d888a5b385275393c635b8813cca73fbc8b0ac2569b5cb62019a90ae2fe2e918405690bfd241337ba62b8ae160a8ce72e5962b8c64c88c17804a3393684211649c5bbb9877af0beb9ba20daf6de4a07c03fef9ff7c331cd8ac08b7c99832aa669256057cb2d03457f428e1d0555a1353ea7ffce0181821f2c3a6446e6bf058439020898bc63b6c427157b74b17cb7198a265023e3d3338962ba5bdc1a81dfdc88079797afa62f6a6274a23f0f153d464f52ad603545969466187430d9804c5adf5c1f71fabac05dfb3d4671a3bc6609dd076a6bb917f8ff2295c2584f80afe17de1db3c7e6c58d28c5505c3d5e236b29c69958cc9b11f5d1e38efbff15132d4592e8228138474045b0afd2828131a2833e72aec4b0f465b6cfd73b2665ebe4ba6d09ac697d42077290d33d6a8929bc7069af0d44a6207aa94e7bb9e9d8eed53e7d12f876566a4861cb8d12991ee685ee0ccdd7212ec26c9e06b1b4e1b6bf4dea0a3a2fc7450cb0ee31e09416265ffed7529155794cd9325bc311ebb5da7aadbca64ec1f50e7c7b1662cb3efe25c4120aa465002063a972de0c51b2f35875189486e45290a898199e609bdda7d01ef8b0b4def3c44f5627d772fea828a0bd458b1b559f8377419e7249ab953104dc878a4e352f941c0335ffdf4477d24bef135ee5a934fa071523150102dbc02b1330a1e748e5111d5f8257e798cd510ca31a3337cf397c27975503d8d5289d2f1e0fb9aa165f20860fa4891103aab2876e02ac11d1583ccc651f74f1346a98294e6036728f676cc3a87f83a72660ae43141507562dbe5f77c1c1303c99ba9f12d799a4fc46b2d316948641d15d4dec43cb9a5d77b2815c49825633d3bf33f1ab29bb169ab65f987c116fb188c18fc3f810783e2ee35127ba8054d9874ef34b5ea9ec9253d1db25be9b94fb61965fa6403728af665ffd77cf6f950d811a001fd8f9f11c937fe4cfc3c471c6a7186476d97b848a06ba5ba59583ad1b0053cefe82b3112f0a1835b79b993362198e1900225c1f17abd7c0f6cf8845a756968f8f9dbd87b5c3e8e8712e3fab4fbbbec384de29dbb11b61c2e0731405aaa20a88bea5e108105e0dd28ed591deb68a1be3c1a1f5cc057aa1360bcc8bee575d781ee578e80bd323b88deabc5b5848d017b863a328663f5426564e3250d145d30364bed2af3ddba0aff95a716c92a4be3798cfb23f1d2b8d1fc8eb1b56d937f1a3e0cf1ee64ed8cf25763151af38260a0fe698dd90e4281f4620ddda84830084c62c18ecb580e1ee3c27f7473529a2544038cb3a33e769a44c48319006fd5f88732f7d8dc526357d3d812c3a3c0e9cbf36fbb7df26e3fb56c34729db73b2a2a63b2e8bd5d853d71b5c33a77fc7df712deb09a9792f70b77ecc0d443417b0962e578c3fc53567c47cacf7249f426752f8088ae804b6520d9a1679900a47de0cea996694a2d6d98f900e2511369aeb78a94a32297bea6c2365fd904acf74042762204de79e28801a3aaa36520f028bcd9cd54a69d48b46f17d58b294ffdf71594bacd8e476d4ca4d87393774adb5a8b9dea0557062ede374abd92b21f1c7706b7ae7d4c8eec2f9c742ed3f4efac0e0eb3a9b55673d219360aa2862429770232a5a75a710e73dc756b787b2e3865a072a27e575702c02bcd60ead9b9eb90966663c0edf4aa3d3d8e4b057205ec61647cebcd660734927229de8fe9acaae916fe15cf227a7e09a3c7eb2b65bc43b4b253b6435ff269b4e1781ba6c83ee28d3a066c02037675265c1c38959f2cbdfc812122c8dfdcc77ede4cd247924c7933550e96cf82863e2f6d2e58d7ee53c547b0e86244f0f400f2760e049ebb4bb95e4b6eccb7749b5dc8d1a773b9bb52ce403d61db67c206f44be3f2cf2faa005db54a9e2642c65e7275c410ad965c9e1d4ab2e2d180f30b60e5185e5af4a1aaa89b35f4ac4675ffa516afd42827d6700b2cf7dfa865da975bebac7746978f90cdae9173e635981ce5048f4b61937121e9ef0b9f44213d84b394d7d1b7c0ed5e53457a0da2e8ba3471f6add5d8507070d0b4cae259dd5de9289c0ff650378433bb5a04d38729da57f599700f2c35e30eb7ae7b77af1438b0537c5c35cc5d2933648bf4baa01914eecdc1c2f05bde264cb235276f5a6f8ec719b3acf6610d28b82d2dc289b865c0a8a929e23610ba5a65e03a1d20f1f68b00789c6f129a8d5a8c1b0071db5c252dbe51863ff7c3c7d9333827456e4d8d421c2e44d45984449dfea449499047442bbe5a4ab82bbd8e91f404842a7a1eaef156a9d796adc2053f5d329b3b819c67ea3d28ce8e116f3d55c5045742b0895f790dbe5be8e633f13c83775b6f7e01ad345489e3ed5021f9fcb080e65b7b414aec3565a973a710ecbcc12fd104905a01af84e1f039b0555b483839adc117e7b83fc063403de8836b029f8d47bb7280c729dcc558388415243c73dfc968b88d4c804e3a0edf8aa1b25a1c85c9d1212ef98537243fe1c7be478b6199150ea728f77017bee99f23eb359811dd489b8b30486428f45731e80be3030529919aae572e7cf54b2b53b0b60a57054ef73832f01470f90a2c544a3df049ae30cd64282ebc27977342fe4b9e9c06bbb0723db16050f3c7328a611cff23715bfb256a6c692720f33d38879a735fcb1b276982c149a1352f760705ff85a058f4a4e373add68d6beb3f9edc82b01a890f235fc60f780dfac6d68ff35cafff53fac3a4bd4ad5c3b438906dd6ac7fdbfa5a65cb7471be07a95eab29ca114d6d8ada1be2c3d6114d0d006a0a5e84a506f5e0c37fa26d5e5da7e4d71324561069eb1dbc852763d86b6e85c861cf7f2ba4c4fa12713d5efe15596552b94a311e22d4440b816915425c7e48dc0c019998ab95dea71312b18fd33bf21e5ccf67846ba668d6982ae5688e219cc5044d922f8016ce6f2e6521d82186629ebb2a8ff6a9091ea3ca7ed74728d4c475665220976733ae3a35780441339ae56936335a29c4e8b8e0d7e19820ef181d7aef80c21a17ebae79bdaf22d229cfda2d1f7ea854cdb5bb55449a74b7c4a1adbbd519908ce02c640516cecfc3043bcd716f86905a894dc12678be138cca2a190baad977a14dedf8340d45048f01821e735899942b11c00ede90459320bf5e433631d78c267ccacd654764504e0b7a35def81bcdc1facc0a4816203bbcc75b5630c00958574ced52792bf329111cbfe869a5b1f169285545e07de"}, @NFTA_DATA_VALUE={0xf4, 0x1, "ec6506b2ddae3f4150011b326e1e1604905bc56e4d0d3df7c782b0a69cf93af424c4552d296fb33b0821abbbc826af6e4fd9862b66c03f687c7e6f27e587fb0616e45dc3240b58ee884eb9dd0dc6008f4572e006812d8dcc338dc90fbc14b59def85a2e8fc1e6b6018c5311d095081c74bcd78cb52d2d0530146bf6414f2f0af570d034a2bbd304b28d778a9938cdbbda102f5790c68e6d21694eed7beaabbf006fbb253c5134fe33642a1e6480816ca36cb7c8ab12a9d92dae79ae2bbff4bf570ae30ce3f62ce77851518f4455ded44a4c316d2c7f717fb0d8e54addb9f6a9d4ab7adbd85af9ef5a1e25a849b78e31e"}]}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x158, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "555261c20680821b26263c099dcbfabcdf735a38bbe4c2af5da7ee3c8a8efc48d438d72515b56f80059e4766f27c0550e1a93760a474b39244e6a59c14386656c5c29d509bd7f4a9240b377d54acbcef9a2aa102dd3bc00f71fc70371d92aa5e5dc6cc146844443b0af4286cc98ca16dd4ed30aa9c131f4c11fdbbf6e41b15ce5878fdd6de81ae0542c17d6f5a60bf122757569eb4f68d82e4e0af916dac925056310b273541a97b48c9778132c1bfc3317933aa2fbbabf459b1376f"}]}]}, {0x558, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x93}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_SET_ELEM_KEY={0x1f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xed, 0x1, "104c6275d5d2dfc7fc19e293823e4d6df11e2d9d4f81abdbfda99df968e36eaea3ca4dcbf9375d7f1be248d75746230dd4f44b409fb8f8a31f98448be5d658e2b72ffaddb81998a8d30cffa6490ed2412e0f00c98356668ed91b4a5ae0b73b2424ff10cf076c3c75214e290fd88c62a2279d3622488176aca60f299a68bd4e53055ad2d99b893b763d3867147398579f81a68c21da5256c4c586609637f206f5ca02db03976b89fe0dbb07329938448ce6a57603fea7e7282fc0e1a3ccbcbb35f4ee37aa07b587ee49552d49bd76fe4fbfda5dd552b320457f04800deb42c6bb65cc7f77c813d69994"}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY_END={0x218, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "446157ce9570895542ea13d54608e7894390f9bfe4fe7c667fa6c234e8f9371d9aced92105222d1d838bd9309fd8dce625dedfa3e42b372624fd0e8bbd68d6b2c61204834ba0d544440def446a46921d32185b7e8b6b6ea9c21fced3ddb306b584c7223ab6dcd39bbf3b920492955768992fca8612e0ea948df83bbfabcb7651078e2448af8183bc4478e2aeff59c368075e27f139077d008dd74e21a20ba5198232b036dcfc87db88e6f66a5fc060d6b2990315dd5d64e8adaf14c263f2c0055c663200fdfea71873b02c95d6bfbfe9622e146c2d2a9f8737d504902b91fd4fdd47ab7a36"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xca, 0x1, "313d52ec2a135d8cce1de4c2acc7e348d501f20d79fb0c5cd3046b5b858f166b494fc6fcdaeec6012fe0fab79002a140510367e46f57c9658e9dddf0ddc441eac78971019bf7755c630ee4ecda3c03869fb2f6b3439644f61839757cbb0c37f5a1b3a4b020981749608724cef2c85d8a14b06d9300059298adf5c084b4e159f2721c2be75899dfe56a6bbd55770885189ba6a3785cad9243fd491cbfadfb6a9068ba4bdeb118297bbe091d2b96dc526a4cd1ed9a7c200c79ba51018163f97db781ffd9140e2f"}, @NFTA_DATA_VALUE={0x29, 0x1, "454e95f8ae0c8366cf13fd96d1ba812ff95910708dcca2ce36b6f1ba44d2d53c42cb379445"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "b68d56269245e4ea3863489ce9"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "8dfe214cf0ff4454765646fd4e44f2d397392fc54fd9cca8997ff7d39004da16b6dbfb62ce6cdd9aebc14bee71384e83b441527ea18d2aec8d54b8dfe4367dd92de7a9b2f0e4afdaf2ddae6b9d62300b41029a85f8c983e139c1ab740911ce69b8c681ccca3e6d1cc00062783b63329bddb8ead26f57fde2285533aceb938c9b3b960e5c343c634d752a1b9d53b3ef40e55c6abe3144f807cfeb6d2d3aeed0d93781bcd0a832139871bc50696728974159"}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x280c, 0x3, 0x0, 0x1, [{0x2530, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x10f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "7575830e121908f0f7deb67eccac996b1ba77a811097252fbb5c64468909047106b7a61569170d39165959c93f04223308d20da5caa187d9e1faa2173e02b4d3c16dea285765fe13ae1da4b87165e0dd80ec94320c57ee164683aa0ae66e9492d646c2c6618d03eae4c647e327f3dd7f03b670c9931e8397d2e573692d9a88d6bf6e4a593d7bb63660a1628a2e202ba3bb6704e448449faa5c2409de1e5b10f409668f4b9ef067dc4a249d97fcbde2042f677bd6c1e6eed79485ca72d6738615cef2f3fd94886934"}]}, @NFTA_SET_ELEM_KEY_END={0x1264, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "e72cc86a6ebf987035d9180e571de37d5a55528bbb262cbbae1c2aea6baf1a2329ee3561f85a13d081284435c0a1ccb059dbf58c8a1c244c685fe0353720feb4b5e270eadd0fb7e9bac9a65413cabd880531483b8d76bb372039ac12c9ae4715245a2b4096e60c101a41894ff68b1fc515646786fa0f7fa6fdb252be7963a8ff3c89ff4a1fe0a9094a1c92de5c7f0957a0d31e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x76, 0x1, "0b1350b1ea81aa771f29cef44aec5fbe399b79cdcb137bdebd67d58c468c519b3c441a5d7087bfd491cf2a1214973f12012da33b5f0e674ed8074bfaceb347dc592843ada7b2f3f2cc916a8f0c01efe0b5ccfaba196154dd0c18b5cee98cc6d96fb97ac057b82ffaf375593eb3cd30c0d125"}, @NFTA_DATA_VALUE={0x32, 0x1, "5711d6937dc0c2b8be978d498c58be848a0fbe6d8822d07fd3fe70af27f0c2d84ec9c7b7165ac1f9cc2593098aaa"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x52, 0x1, "de8733de614fcdd14f79b5ff3001a429318cf14ac62fac190bca1b2f453742948e4e01e5babf42be83532a9a4260810dde154b33ddfc9ba979a44ab93fd8b9274346e8232005df0244ae238b5769"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x17, 0x1, "4902afe281854a926372c69b6d5d3d9e1296d4"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "aa2ed59fbd414c6dbe0e79b4cb0d98c12065f0b28d448abb3515340634e3a511c10c5f6457dcfe145176ca7e7cf79d55bbc97dcf9020f6ed3e8de9797c60f9bd0ca96524818c675adcff8db1701fed3afbc82bda57fe5fa180b8e9ff1a1c592473fdfa7824b08e17af9bc02699a4b2b5c016d9f804cd5e69ee9a127204c8f3877d16631b7a94a982f7984fb70519baf02aa93256ef79e92795f1e3a7578d29714b5cb803a51554b239a8a49767f4e97e87c816fc69fbe2da"}]}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "11940946d8d75d7d8511d1106bbf1fc4d49cb14002dc54faa3295325d4c260e6087fef1d47f7026e9d75b16cc0b10dcf901bcdd8dca072393ebcfa1013704067fd736643e43da8ecf029253c71054354830da33b2dc7b3cbec6f16e9046585a8d7258fa2af1524c5b7d7ce6f9ffdcb48ac3e64ba7168a05552b15a58ed228c18f6849051f79267bf756ac626296a25b52f40b0d19f9d718ddcb355d9ad7dba4b7e04f240bf238e97fe4b4dfa55bf1c769ec3ddf067d1d6de060fbcc4b795c25a881c8f24c8f01a9cfcc99b"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x130, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "5cbef6c6bd06ff1848570bbf86c316fd8fca66d442172bef34582d4d58645083a7c2e8b97073d2de"}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "61245238169449a15181208a53e0bb0c9bae021a0df42cee02c700aa701c37ee94582cdee1e0a5380704d1cc2e8cf6f58f1664cc1543d88ad4597fd0573fc573718c1e90ad172559ea4c17f9136e6dd9c38fad75d55794cce1f05fbb621e81cd7bc2f142de9c545bfdac1280801292eba9127d6255d993195cc359ec09bfe0860ab8ec1c25389cbba9ecd35c3d6fc04a9806feaa8f1fdf1c3971ae021853ecf330a02afb6c0ab7e7a20f74b7dc97ff03e5a6c1f95a98351ac58251e4eaa633a584dedb24e5a71c56"}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x194, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "4cc3df094743c40e851d86fd69fff170a2ffbc424b6e82df4820b026adf37c3f08bc3bcd59a63d4ebcf218a924d1f51b0b6aef8cdb44cfe4aad5da7003a2272e8c113872f57756e3ea39e93afcb8f6fa1d7b92a1a06e87b1b83fad53bb6c35cc511a1f61331718410d96896a5bd2faa274013401b010cb8513acc2d316adbae54479039470d3507d7ebc45926865"}, @NFTA_DATA_VALUE={0x70, 0x1, "9a51905d87aacbbf3236335ae234ee06b6569a340c9909177cfa0a10ca154ffedf83ecc311beef2037dc588a8db3145011839a511689edc43cd8c62139271d2a6a33c76d1f8ff2afd02007fbd24a10c6a466c6097a371f1b930a6eb213f694ffb5a5e2ab9fef248437c30485"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}]}]}, @NFT_MSG_DELTABLE={0xcc, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x98, 0x6, "e0c61f53a39f24575f534402d73161ad556d06a1b20cff9c297cadbf8362b154ea4e9b78cef3fe1bcaef298ca05d6d71c262e69727a50e73b6e6471c0c22c82d116dc48ca60ff1c30e91ec6a7f762f3c24df29bdacebdc08c35a1565b8a0d6771d2cffd94d6b186941d877716f47cc383ab13c45b8d89f2875f911d6e54b1e9e40b10d9b39397f4de9a46427998c652add7503f5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94c8}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0x4}}, 0x26)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450000700000000000019078ac1e0001ac1414aa0c0090780000000045800000000000000089000000000000ac141400443c0001ac1e0001000000000000000000000000ac1414aa000000000000200000000000ac14140000000000ffffffff00000000ac1414010000000000000000"], 0x0)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f00000001c0), 0x10)
socket(0x26, 0x3, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet(0x2, 0x2, 0x73)
setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xb9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x71, 0x0, 0x8, 0xbccb, 0x3, 0x3, 0x7, 0x7}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xd}, {0xfff1, 0x4}}}, 0x24}}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0xfffffffffffffeb0)
executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000340)={r2, 0x0, 0x2100, 0x0, 0xee8d, 0x0, &(0x7f0000000300)=0x7})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80)
socket$kcm(0x2a, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c0002001800178014"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x400})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500001000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x5, &(0x7f0000000600)=[{0x1010, 0x0, 0x0, "29c4c3474479bb34441dee598c29a6fc29ccabf33c1078b9f65f93219d8ee3f95f355fdd7104db312951579a0b9b66138fcf0acc3d4b33729f73c417e96d91d2eb5e0319bfd1b9a0cf7190a1216b93faddafd420a887bc958b3fd15066b89294ca9df3fbebcab8cc156f00020f44de7a57ff9a0044c666525947e889fd7dca04cf13a9537702537d305dd2c25744230700a06e7e519b816c6469fdd4ab4e929df381a43607a6695e534eadab5d5d054bd0619358ab113c5f4752ef7f7329fcec35aad7631bc72b44a0d99bc3177d60cb840725520ade4a8eaed4d14b84511894f0e193a6496a5b53ff8731a6544b3adaa2763269919452d2aa2ff727a42215942132105c51a0c0de3c41bc9fa714881ec211d6571ff733794b3e8ec9477639ffff3f981f245ad5cd06d18fc7cf9403f0379f9e7d24a11d46cfcd45a0c45e45ec9471827f9cd272d79358e56e9e33d8df9fcdf749a35bcd057464898d29fb1ed2337b05eabd7a41c8c7ad3c47218c664a317f727ebea385ff01400cb6c940d5d394e16de2bcfe2410d0f24e6b1321e75364d1a42624bdf659c0b7f8f76b8a421417dee9d10cdba301d35852d879c1d643bc702e29a54598c9e34b0562ed09536b1b06d4b58df3d91f973f9a38c88caa4e3c2c2d0b6a1da2dc8836781ac50af9cc42891398e6b5d64b5bf047c6f2f6e651d736ba1903921c5ffbe726a6371b9c44d20cd04a96ca3b1bbf97fd350fb63c13df32407782424cac6b1eaf111da7db600715e2ac333154cf3cd62706432e57e94645ac7e8c92d5236612d5a3c6e22438c51b294b3cc96c6a1f52450d92abe9906ba0798fc97e421c2f1ab36d20fbfb01a462143bc25f8f112263be15b7d0f8479fde6f42fa363437275acedad60486c57f905de48399d4ae5058da17522f5365a29eaeab2def70c383940a38d9a5f3d2b168eb64f8dd5ec6cb50581963fe8520c4ecff9158c8702f40a4a9b8900c55a0e0b06c1af35d12ad39e44e14a7cc83aa6bb606197cf34633667fc997b592907a62e67fa40dbe9ad23a5bf9d05fe812f96db107653368213bb559c5f3158593d9d37b6cc2bf6df06fada99384043d676da665657b5cd22a836eae16705e0ca272beb6955c3fad86ec8506e2c78f7d7260682c68ed8b7ebf02a30d22ac585cc347cbdaecf6e9e7e5d5aa97b92aef01bcc6aff785badf8f9b1699167ae930a83f0bc27bfdca2f895d7e5eebb95b82a819be127ab93433f5d8db50b12d058cf0d0f88737fd949dd0043a08b6219e6edaf4bd641e0e8285a0dfa47c96f89e75971ce7d6241e4b7d9fc7041c6902a86cb18492a0a8b18fbfc5e3d22a54de821581d1b99ccad7bc0c9a9138dc7cecca45f6568620532e2abe785c13ed459a18547c9f178cd998c317a0031625b5ebdcb99ce5f54b060da36203175b893253645ba2fd2ad856831440d769f59307313eb4ebc84f4a02a412075837d4bbb30b818d57a883747a1af26f35f1c2c208e7defc085bdf9eebc10079e18a0f23fd21a7d2884ab5ea7bc44ea261c91bf2ebd415a23eae9a7e85f3f0880547e1bcd13ef0468b458ed37f421b851bab5aae964b899f6cbc1f3d02f3800c7b35c89d0efdd6025e0921d3f526ed6587c415b177b87134e3da173d33b68a2672f36a4cde5ae8809212b9d88e6a4b4bf20afef7c1a48b4a5f2887874fb4e7cac0bcf71ed0d622a367b329f4b5e474ee4fd70636e86995520ec970970b0cd1f340d2b892aa56c2cfcbbbd6167e37b1c39327ad6cc85dec48a7e142b63a84c5b3886487ab2fedc582ac6f965d376b0581c0cae3abe24cb662e0c3c116d7e8dbddb107aa993cbfc24a0a8ca900b61c986f190671b809c8b34d110113397a9397e6b56858428ca09d708d83bdc51d90cfbe14b4c56a1ccd8190e581b766f2e0f8b6c49c7e74b8dfe99a35188115ea48b35d7975f58a5055422eaef9ebf438fb9eedaf9e1909c507a99542de7ad5d35e332d9267bbce80d58d5475bf714e3be2b26b258a6823d42410cdf72aa6f12a299f720c479e02060849e93d59c1b15d484adae609a31471abd4338a6aea03851ae370273f1ae3d72c59cbbd25c5a3aee91869c72a27b763eef686230650a895a0a9a2f77bdb6fb349c59cc48820f42500bc51a237a3436567d384648fb867d48602657a8c81f0aed85977073e103f0fc62aca6492f4378a646238349a5f8bee94f4766ee9e327860704b8a090adfc2ee0db11cc2df4b652211d30ed298dedd23eab38eacc8e0d2e69593a5682cec4d2c0f2d3d66f3df7be8028238d0f590ee90621d020b93085a5f694d563856284bafd4f0b954e30a896d1e399d6316d660e2b6ad3df716122f0a303b2f0217c6697d4d815b8a28ab8f028a8159f2aa9ed128a851334407d54f7e9c64e7b92a82ce51ab2a5b9ed047040f74fd42fcb2c41f379ce658641b73a60fb4b41f0a9a8edf605265fa6efdd28e1ae2fb8d4def9bbca9c4f9f2edcdc9e6fd423d9613a43845f20c61b9661c8b9c99bc958af7e61af5e704baf5ca12e65e8f0b133acec17081cbb50c22272ab51c7d17cc12a3033c52483b47aa16ac9dda11fb77001a4316b98bf873448267c8e7e49d6d07477a62b33e0a46e387999bc143f69c41130dfc77198f1339c7177befbf3eb06a9ecdf062fd842b29dba1b204474e309e64e2631f6c5e4d3d7ca536d4467419e620c8619a1526c691206063971491ff49aea6be8faa611203c37b3eec38d149035aee79af66693edc97d0da78671b88d9757919bce0b404ab0b2b43534e184fc67fca7937499782c1aaf7754c68225fdce1bc0643c91667d04a04a7c410a908d206a7e7c4c2a33b9c761be5dfe6e03a477462d359e7c07752a9700b1c37fa21b04072b6eaeff92d3633564cec2128406b1712fbff8a94b32b800b6a010bd243b9e96ef9c22ff2c77023c55837d219c3ae7f0d3e2af3cec7ba5c8222ccb97a6da76524dc70b41627eb024962fd743e59b58956bcb2bf03247a6dcbdfe23e8c3ce54ca98b34e74fd6cc01e622696556bf245b92ceecc5aa2a74591f1a584a6ad18a346da14c5ea3b52bcbbf2da744920e22e0f09b4fa7c63399606bd595b8e7a0d1d28d73d26a5defbedca45e1571dc76a120472ba5be9396a5d0775cb28af94469cf1657aa2efdc6104e1385a2cc8b7e782ca816291c4a50d7a4b580e26a91cfb2e3b81ce8fa76545ef66c23b2045bc81ae9cd01650243feb5b521aae85a683a2cf20333fbf24903cb5a7ebf89b89ce1dadad33118861a44cc067a5a4c511e7b4d2ddb22338c60fd174703b169b5bfe14e44783e5a1495fd267df653731add97119e0ac9e7efedc1b5881679101ef710714bad7ace7d25df8e078dd5fcba19b9519ba45ca3c779f8ee8d541a5efd41b6fba6bd3b46f9e361fde6b6f2af713179622787f507281d444110f6f93c53b17aebcd5b272d44c1f8479384970234b199559d53a3d959eea9bb230c2d199c5538c3efdf049d617d97b6d658840d543237157f20ba1929d9cd7247827ba400bb87b95c3225b3f86c2b42b584e7dc16d6619f408e322b4fd2db7148185c958469eb6e69a237c75a1c8a17da35586c835d5f22f9637c77ce412086868f9a11f3e341af960bc014b006e41ef6adc1fd91f86361a5541a8aa018dbffb38bb6c27ea0eb5cf9242efb49f431371beed7c202ce91e7f63c3d00fd4022634253c64a5355150b746164a1a857306b258332a11a30a750e402885ab7aa5c02e4446a07250a74d0649793d7387aa588f9e7552621410b906a907f5b49c16385c34eeed4b944dfe86f65b2e8c5ffd790d333b3b2b6b158d010a9cbeb436cacfa80f6821b409e6722ac5a1662ec7e591786f2ee5b95c93a756d6b13ebdd383999ad08b1f964036692a83e1d7fb3544e268161eab60ed235cc26fd7e7467bd97f6f1d32c3c6e2509528febdde9e1736c4bdd1dbe057d253bcdebed84a21549db56bc284ada3909fe8f7a15092b0b64e6f0fde332150b485d00c5edb5ff12861732227c408e8910708009bb7d26c4f0e070a5346e21643e63df15061d2971ae4337a34fa0dc1ddae98bb507914f44ec05e794fd4c20b28d72171eb86d66fabc229ad9e50ceb4e0c1b7224252b1e650c66528d3e90bb159047a2ab96cb10382581ec8cab511ae6028f4008a8fa93f136e7d17c26b209a240666df3394d92d687a56fb74c53d2a9c722a47d8b78490122fab47866e34c2509e002c6f8fdddecd56ce66b9151dbad5cc4e12298a20dcf4f3620409fa8332add659e2aad35359d07956f1d8a9e3e6779ce03174e1ab3465ff52b8b88e550ee077a96b633b527d89b3e9f47fa374a6aa5e92b9cf07ae61fbd00b1af4035af0c701f7db0243e32f4c8d72e73698742d092f1a932eba1ae5b4dc8dcb70a486764eabfb11e4bd6bd0990622888f1c9f28b4faccd814ccd7735fbb62d6cfbac24297cfde2ef217f6f8065729c772f0f3013f43d1822decd2d7deecb19389be2aee3b16db0c64eafcb2740fc19ee34010f5c00fd30d6ca921504796caddb546d53d977fa858c45a9e7e423aa3a354261156ec74beadf57eaf5ea16e2daf2e9fd6e13411816b705e62fe36d25ef08e26e0846a9da549a5ad03658826e56ddb0c7732ca8fd2f71a1f3ebcf32d5097f3f7451880ab5d4f3dd860b25749868a2d13d44ffc059debce3295e2ff35a86220d9425ef553a26e0cc96a1a631a2b5922655dd13a51b5686a0dc582e5946adba613999b26312c7abcda3e18742ef68906e2f9615165f2896b160096bf334babfd336b68c6e4d3f9cec25c83065dc3f4636f73717c70d98ab05fee2b101527255b7c5e52e280c6807f84c7ac46766607fb9440a7861050305d8cdefa39510ed85892a6bcf5431677c436574bc17b1915e5c65653dbfd00246e3e403b357a11ffd7c208b2eb2f3af8d1d84fed3ea0b3f37717313a2d0ee5a933cbed5a20ca1ccb00fd54b7a3ec34c3bd2245b2c49cfa31d999d73a89e4c75fb557b086bea6eeb022edbad85bbf905c86c45f512b714412031492691ee68a90e41605c82dad45fb4f6a3d70c1274d76a252c3a712aa7c2ed1549b92fdf58012feeaa738713180e56e401f329d8864def28beab976489974d5294546728013d64e10330e92ca20ce32eac971fd3196676a174a659512ec043952424ce06f4f3635213fe536f0514397d8161ed00e2aa8925fc1e9fc1c301b28b56d2654d95bc8c362b41439b95e9da06fc149d7a0a47eea787292d6c61c7e7ddf08f567f055fa352f06f052e304a83284ef0a4ea8d515f146b2a0f79751e1b99905a082ca5d2c0fc7d05645686725e36b18717dff90139605a2cb46d25ea6892aeb8fcd7ff998aeb9d4b9c2863ade72e98f98495cf13409d6a7f71d8883a3f7f72a5257031854b72542a18ccf149939146a7fdedc94800e9475a6375a5c749b264c72824292bdd50451f97a709a0a54b2d9052fa23f26bf024f2f5e579e5cf1e572eac2707f7efe3148dde6c6df8c6b1b41c5f2d0d050aeaec38b5818544de20739c5769b1d659900fa499b3e740cdd7cb1389f83de5c009f3ca200614974a8f4a9506f857794b557e1a67e66f7d72ec2519457805417a2017a28432f42647f99d013afca2a0f95eb0e31c621721ab2e848cfd93bea24bd91b20d4e16d76718a6f66c7b27338674e071c2b61ebdac5e18ece820494adcb1d77417ccac6f63ba24139f81cd30ed9f74ffdb1d54abb7382fe7e0d3e4f6bdcf05059535db9c1fa5c83d6a95498160724a"}, {0x28, 0x0, 0x0, "8192fbea2c061381413fc28cb06b4e988dc486c74cfc"}, {0x18, 0x0, 0x0, "4fdf1ab71595"}, {0x18, 0x0, 0x0, "f47d"}, {0xe0, 0x0, 0x0, "06435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca0"}], 0x1148}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4)
executing program 1:
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES64=r0], 0x40}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{0xe, 0x4}, {0x10, 0x5}, {0xe}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0xfffffffa}, 0x28)
getuid()
executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000003340)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) (async)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f00000048c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e) (async)
splice(r1, 0x0, r3, 0x0, 0x4, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, 0x28)
close(r2) (async)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r7, 0x6, 0x4, 0xfffffffffffffffd, &(0x7f0000000000)=0xfed9)
executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010102, {[@rr={0x7, 0x13, 0x18, [@loopback, @local, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0x3, 0x80}]}}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x88f00, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0xce22, @broadcast}, 0x10)
listen(r1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x200, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c)
listen(r4, 0x7bd)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff8100ce22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r7 = socket$alg(0x26, 0x5, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00), 0x10000022}}], 0x2, 0x42, 0x0)
r9 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efe2e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@iv={0xa0, 0x117, 0x2, 0x88, "0bd020d3585a8db3d2d50c0e62bed66378dd4c4641f5a2d08fad3f2957ecee8152cd050ca917ae1317a4371b110db89bc51712c188db45030d1a3fcf0e91437195b1bc6f86a841f5c939957dd412d799b24440e05faa037fa57687b6993b958822052c2a981a68d5929a524161694f1124497c1458272603ecbdb8ae8ad9010c1ad388aa7be2194a"}], 0xa0}], 0x1, 0x40800)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0)
write$ppp(r0, &(0x7f00000002c0)="f65e453c4f39951188ad403f5bf85ab0f78615e632b55348b07d74b8451344f95697589befa0c7b0", 0x28)
bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10)
executing program 2:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r0=>0x0})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r1, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
executing program 4:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000005200)=[{}], 0x1, 0x404c080)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$nl_route-socket$nl_route-sendmsg$nl_route-sendmmsg$inet
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000005200)=[{}], 0x1, 0x404c080)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
single: successfully extracted reproducer
found reproducer with 33 syscalls
minimizing guilty program
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$nl_route-socket$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$nl_route-socket$nl_route
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$nl_route
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)

program crashed: WARNING in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90)

program crashed: KASAN: use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) (async)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

program crashed: WARNING in sk_psock_destroy
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic-sendmsg$NFT_BATCH
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

program crashed: KASAN: slab-out-of-bounds Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic-sendmsg$nl_generic
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)

program crashed: WARNING in inet_sock_destruct
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic-sendmsg$nl_generic
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY-socket$nl_generic
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: WARNING in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter-ioctl$FS_IOC_ENABLE_VERITY
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000004200)={0x1, 0x2, 0x1000, 0xe1, &(0x7f0000004040)="d26bbfb737bd415f087085a1b59ce1d48a5e5f4e489bcdd1a98bb02e6c2c22f9e62162ffc4fcfcb55efb05a15133d07e36928a254119e22bd4dc3f101954dbb044b3385916b33855a9fe2b6a92b7c6fc62355e565a1820dee2812ae49743e3f34b068bba027044c693fed668eb1e770f83bcbacf50183f8f36d5076c207c52ebd7a0400d64a191eda6379e4a1d6defc328845ae049063b76740fb09d8d7cebfc14d7e0a1e0758c1e79e717cc642ce2b413db0d3ab99f9d4e1b9fe120001e978c15b871c7d7a10207153db2aa9966674336f5e0fa213055b7b8f36f3f2e303bce0e", 0xae, 0x0, &(0x7f0000004140)="6851fd6fabd9f95936e89c61bd774af2d4e3b360bcea749e3c8a1da59175e02d733eb2f1189c0f92d69ca55145632680d9b45518898fb8a87d4f7e62b68d69395694fac0155b25450aeb0690e39f7808d497d90181d762534cac445c7bf6cb0c4f3c865faaa98aa0cfa97fe4d1f7e8ab5f4d50e2deeb61bbd80837b42bc0e982f10312605afb263072728dea20f9a7d4225aeb823791bbc3b40ab3b40caeb0bc4ea363775d5e7fda7dfbf6ee2efb"})

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter-socket$nl_netfilter
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO-socket$nl_netfilter
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)

program crashed: WARNING in sk_psock_destroy
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm-sendmsg$IPVS_CMD_SET_INFO
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg-connect$bt_rfcomm
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)

program crashed: WARNING in sk_psock_destroy
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: WARNING in sk_psock_destroy
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-bind$inet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bpf$MAP_UPDATE_ELEM-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: WARNING in sk_psock_destroy
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-socket$inet_udp-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r1, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-bind$bt_rfcomm-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp}, 0x20)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_rfcomm-socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: WARNING in sk_psock_destroy
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), 0x0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, 0x0, 0x0, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: WARNING in sk_psock_destroy
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: WARNING in sk_psock_destroy
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, 0x0, 0x0, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/239, 0xef}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: WARNING in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80), 0x0, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/4096, 0x1000}, {0x0}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)}, {0x0}, {0x0}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {&(0x7f0000001d40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: WARNING in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000c00)=""/197, 0xc5}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000003f00)=""/141, 0x8d}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {0x0}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {0x0}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: WARNING in sk_psock_destroy
simplifying C reproducer
testing compiled C program (duration=1m42.323482521s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program did not crash
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program did not crash
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program did not crash
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: WARNING in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: WARNING in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: WARNING in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: WARNING in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
testing compiled C program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
program crashed: WARNING in __sk_msg_recvmsg
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
validation run: crashed=true
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
validation run: crashed=true
testing program (duration=1m42.323482521s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_DETACH-bpf$MAP_UPDATE_ELEM-bind$inet-syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-recvmmsg-recvmmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/195, 0xc3}, 0xfc}, {{0x0, 0x0, &(0x7f0000003e80)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/40, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x7}], 0x2, 0x10021, 0x0)

program crashed: KASAN: slab-use-after-free Read in __sk_msg_recvmsg
validation run: crashed=true
reproducing took 3h8m6.089538676s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x197/0xfc0 net/core/skmsg.c:431
Read of size 8 at addr ffff88803492aab0 by task syz.0.21/5897

CPU: 1 UID: 0 PID: 5897 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description+0x55/0x1e0 mm/kasan/report.c:378
 print_report+0x58/0x70 mm/kasan/report.c:482
 kasan_report+0x117/0x150 mm/kasan/report.c:595
 __sk_msg_recvmsg+0x197/0xfc0 net/core/skmsg.c:431
 udp_bpf_recvmsg+0x196/0xac0 net/ipv4/udp_bpf.c:83
 sock_recvmsg_nosec net/socket.c:1137 [inline]
 sock_recvmsg+0x155/0x1b0 net/socket.c:1159
 ____sys_recvmsg+0x1e6/0x4a0 net/socket.c:2918
 ___sys_recvmsg+0x215/0x590 net/socket.c:2960
 do_recvmmsg+0x334/0x800 net/socket.c:3055
 __sys_recvmmsg net/socket.c:3129 [inline]
 __do_sys_recvmmsg net/socket.c:3152 [inline]
 __se_sys_recvmmsg net/socket.c:3145 [inline]
 __x64_sys_recvmmsg+0x198/0x250 net/socket.c:3145
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f70ebb9ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f70ec9a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f70ebe16090 RCX: 00007f70ebb9ce59
RDX: 0000000000000002 RSI: 0000200000003fc0 RDI: 0000000000000003
RBP: 00007f70ebc32d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000010021 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f70ebe16128 R14: 00007f70ebe16090 R15: 00007ffe124d1d88
 </TASK>

Allocated by task 5896:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x31c/0x660 mm/slub.c:5419
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 alloc_sk_msg net/core/skmsg.c:525 [inline]
 sk_psock_skb_ingress_self+0x5e/0x370 net/core/skmsg.c:627
 sk_psock_verdict_apply net/core/skmsg.c:1062 [inline]
 sk_psock_verdict_recv+0x7d9/0x8d0 net/core/skmsg.c:1260
 udp_read_skb+0x5d9/0x6b0 net/ipv4/udp.c:2014
 sk_psock_verdict_data_ready+0x25f/0x690 net/core/skmsg.c:1284
 __udp_enqueue_schedule_skb+0xc4b/0x12e0 net/ipv4/udp.c:1745
 __udp_queue_rcv_skb net/ipv4/udp.c:2311 [inline]
 udp_queue_rcv_one_skb+0x755/0x10f0 net/ipv4/udp.c:2402
 __udp4_lib_mcast_deliver+0xad7/0xb70 net/ipv4/udp.c:2514
 udp_rcv+0xcd0/0x1db0 net/ipv4/udp.c:2639
 ip_protocol_deliver_rcu+0x282/0x440 net/ipv4/ip_input.c:207
 ip_local_deliver_finish+0x3bb/0x6f0 net/ipv4/ip_input.c:241
 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318
 dst_input include/net/dst.h:480 [inline]
 ip_sublist_rcv_finish+0x1f0/0x240 net/ipv4/ip_input.c:623
 ip_list_rcv_finish net/ipv4/ip_input.c:667 [inline]
 ip_sublist_rcv+0x5c6/0xa70 net/ipv4/ip_input.c:683
 ip_list_rcv+0x3f1/0x450 net/ipv4/ip_input.c:717
 __netif_receive_skb_list_ptype net/core/dev.c:6245 [inline]
 __netif_receive_skb_list_core+0x7e5/0x810 net/core/dev.c:6292
 __netif_receive_skb_list net/core/dev.c:6344 [inline]
 netif_receive_skb_list_internal+0x995/0xcf0 net/core/dev.c:6435
 netif_receive_skb_list+0x55/0x450 net/core/dev.c:6487
 xdp_recv_frames net/bpf/test_run.c:269 [inline]
 xdp_test_run_batch net/bpf/test_run.c:350 [inline]
 bpf_test_run_xdp_live+0x1946/0x1cf0 net/bpf/test_run.c:379
 bpf_prog_test_run_xdp+0x81c/0x1160 net/bpf/test_run.c:1430
 bpf_prog_test_run+0x2c7/0x340 kernel/bpf/syscall.c:4742
 __sys_bpf+0x643/0x950 kernel/bpf/syscall.c:6266
 __do_sys_bpf kernel/bpf/syscall.c:6361 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:6359 [inline]
 __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:6359
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5898:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2689 [inline]
 slab_free mm/slub.c:6250 [inline]
 kfree+0x1c5/0x640 mm/slub.c:6565
 kfree_sk_msg include/linux/skmsg.h:418 [inline]
 __sk_msg_recvmsg+0xdb7/0xfc0 net/core/skmsg.c:491
 udp_bpf_recvmsg+0x196/0xac0 net/ipv4/udp_bpf.c:83
 sock_recvmsg_nosec net/socket.c:1137 [inline]
 sock_recvmsg+0x155/0x1b0 net/socket.c:1159
 ____sys_recvmsg+0x1e6/0x4a0 net/socket.c:2918
 ___sys_recvmsg+0x215/0x590 net/socket.c:2960
 do_recvmmsg+0x334/0x800 net/socket.c:3055
 __sys_recvmmsg net/socket.c:3129 [inline]
 __do_sys_recvmmsg net/socket.c:3152 [inline]
 __se_sys_recvmmsg net/socket.c:3145 [inline]
 __x64_sys_recvmmsg+0x198/0x250 net/socket.c:3145
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88803492a800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 688 bytes inside of
 freed 1024-byte region [ffff88803492a800, ffff88803492ac00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34928
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88813fe20dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88813fe20dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 80, tgid 80 (kworker/u8:5), ts 93535996970, free_ts 93431323536
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x231/0x280 mm/page_alloc.c:1858
 prep_new_page mm/page_alloc.c:1866 [inline]
 get_page_from_freelist+0x24ba/0x2540 mm/page_alloc.c:3946
 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5226
 alloc_slab_page mm/slub.c:3278 [inline]
 allocate_slab+0x77/0x660 mm/slub.c:3467
 new_slab mm/slub.c:3525 [inline]
 refill_objects+0x339/0x3d0 mm/slub.c:7255
 refill_sheaf mm/slub.c:2816 [inline]
 __pcs_replace_empty_main+0x321/0x720 mm/slub.c:4651
 alloc_from_pcs mm/slub.c:4749 [inline]
 slab_alloc_node mm/slub.c:4883 [inline]
 __do_kmalloc_node mm/slub.c:5294 [inline]
 __kmalloc_noprof+0x474/0x760 mm/slub.c:5307
 kmalloc_noprof include/linux/slab.h:954 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 neigh_alloc net/core/neighbour.c:521 [inline]
 ___neigh_create+0x6d5/0x2250 net/core/neighbour.c:655
 ip6_finish_output2+0x729/0x13e0 net/ipv6/ip6_output.c:128
 NF_HOOK_COND include/linux/netfilter.h:307 [inline]
 ip6_output+0x340/0x550 net/ipv6/ip6_output.c:246
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:318 [inline]
 ndisc_send_skb+0xd0b/0x1670 net/ipv6/ndisc.c:512
 addrconf_dad_completed+0x909/0xe60 net/ipv6/addrconf.c:4372
 addrconf_dad_work+0xc5e/0x14c0 net/ipv6/addrconf.c:-1
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x389/0x470 kernel/kthread.c:436
page last free pid 5772 tgid 5772 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1402 [inline]
 __free_frozen_pages+0xbc7/0xd30 mm/page_alloc.c:2943
 __slab_free+0x274/0x2c0 mm/slub.c:5612
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4569 [inline]
 slab_alloc_node mm/slub.c:4898 [inline]
 __do_kmalloc_node mm/slub.c:5294 [inline]
 __kmalloc_noprof+0x316/0x760 mm/slub.c:5307
 kmalloc_noprof include/linux/slab.h:954 [inline]
 tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x283/0x560 security/tomoyo/file.c:827
 security_inode_getattr+0x12b/0x310 security/security.c:1895
 vfs_getattr fs/stat.c:259 [inline]
 vfs_fstat fs/stat.c:281 [inline]
 __do_sys_newfstat fs/stat.c:551 [inline]
 __se_sys_newfstat fs/stat.c:546 [inline]
 __x64_sys_newfstat+0x13b/0x270 fs/stat.c:546
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88803492a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88803492aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88803492aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88803492ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88803492ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x197/0xfc0 net/core/skmsg.c:431
Read of size 8 at addr ffff88803492aab0 by task syz.0.21/5897

CPU: 1 UID: 0 PID: 5897 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description+0x55/0x1e0 mm/kasan/report.c:378
 print_report+0x58/0x70 mm/kasan/report.c:482
 kasan_report+0x117/0x150 mm/kasan/report.c:595
 __sk_msg_recvmsg+0x197/0xfc0 net/core/skmsg.c:431
 udp_bpf_recvmsg+0x196/0xac0 net/ipv4/udp_bpf.c:83
 sock_recvmsg_nosec net/socket.c:1137 [inline]
 sock_recvmsg+0x155/0x1b0 net/socket.c:1159
 ____sys_recvmsg+0x1e6/0x4a0 net/socket.c:2918
 ___sys_recvmsg+0x215/0x590 net/socket.c:2960
 do_recvmmsg+0x334/0x800 net/socket.c:3055
 __sys_recvmmsg net/socket.c:3129 [inline]
 __do_sys_recvmmsg net/socket.c:3152 [inline]
 __se_sys_recvmmsg net/socket.c:3145 [inline]
 __x64_sys_recvmmsg+0x198/0x250 net/socket.c:3145
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f70ebb9ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f70ec9a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f70ebe16090 RCX: 00007f70ebb9ce59
RDX: 0000000000000002 RSI: 0000200000003fc0 RDI: 0000000000000003
RBP: 00007f70ebc32d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000010021 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f70ebe16128 R14: 00007f70ebe16090 R15: 00007ffe124d1d88
 </TASK>

Allocated by task 5896:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x31c/0x660 mm/slub.c:5419
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 alloc_sk_msg net/core/skmsg.c:525 [inline]
 sk_psock_skb_ingress_self+0x5e/0x370 net/core/skmsg.c:627
 sk_psock_verdict_apply net/core/skmsg.c:1062 [inline]
 sk_psock_verdict_recv+0x7d9/0x8d0 net/core/skmsg.c:1260
 udp_read_skb+0x5d9/0x6b0 net/ipv4/udp.c:2014
 sk_psock_verdict_data_ready+0x25f/0x690 net/core/skmsg.c:1284
 __udp_enqueue_schedule_skb+0xc4b/0x12e0 net/ipv4/udp.c:1745
 __udp_queue_rcv_skb net/ipv4/udp.c:2311 [inline]
 udp_queue_rcv_one_skb+0x755/0x10f0 net/ipv4/udp.c:2402
 __udp4_lib_mcast_deliver+0xad7/0xb70 net/ipv4/udp.c:2514
 udp_rcv+0xcd0/0x1db0 net/ipv4/udp.c:2639
 ip_protocol_deliver_rcu+0x282/0x440 net/ipv4/ip_input.c:207
 ip_local_deliver_finish+0x3bb/0x6f0 net/ipv4/ip_input.c:241
 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318
 dst_input include/net/dst.h:480 [inline]
 ip_sublist_rcv_finish+0x1f0/0x240 net/ipv4/ip_input.c:623
 ip_list_rcv_finish net/ipv4/ip_input.c:667 [inline]
 ip_sublist_rcv+0x5c6/0xa70 net/ipv4/ip_input.c:683
 ip_list_rcv+0x3f1/0x450 net/ipv4/ip_input.c:717
 __netif_receive_skb_list_ptype net/core/dev.c:6245 [inline]
 __netif_receive_skb_list_core+0x7e5/0x810 net/core/dev.c:6292
 __netif_receive_skb_list net/core/dev.c:6344 [inline]
 netif_receive_skb_list_internal+0x995/0xcf0 net/core/dev.c:6435
 netif_receive_skb_list+0x55/0x450 net/core/dev.c:6487
 xdp_recv_frames net/bpf/test_run.c:269 [inline]
 xdp_test_run_batch net/bpf/test_run.c:350 [inline]
 bpf_test_run_xdp_live+0x1946/0x1cf0 net/bpf/test_run.c:379
 bpf_prog_test_run_xdp+0x81c/0x1160 net/bpf/test_run.c:1430
 bpf_prog_test_run+0x2c7/0x340 kernel/bpf/syscall.c:4742
 __sys_bpf+0x643/0x950 kernel/bpf/syscall.c:6266
 __do_sys_bpf kernel/bpf/syscall.c:6361 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:6359 [inline]
 __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:6359
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5898:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2689 [inline]
 slab_free mm/slub.c:6250 [inline]
 kfree+0x1c5/0x640 mm/slub.c:6565
 kfree_sk_msg include/linux/skmsg.h:418 [inline]
 __sk_msg_recvmsg+0xdb7/0xfc0 net/core/skmsg.c:491
 udp_bpf_recvmsg+0x196/0xac0 net/ipv4/udp_bpf.c:83
 sock_recvmsg_nosec net/socket.c:1137 [inline]
 sock_recvmsg+0x155/0x1b0 net/socket.c:1159
 ____sys_recvmsg+0x1e6/0x4a0 net/socket.c:2918
 ___sys_recvmsg+0x215/0x590 net/socket.c:2960
 do_recvmmsg+0x334/0x800 net/socket.c:3055
 __sys_recvmmsg net/socket.c:3129 [inline]
 __do_sys_recvmmsg net/socket.c:3152 [inline]
 __se_sys_recvmmsg net/socket.c:3145 [inline]
 __x64_sys_recvmmsg+0x198/0x250 net/socket.c:3145
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88803492a800
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 688 bytes inside of
 freed 1024-byte region [ffff88803492a800, ffff88803492ac00)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34928
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88813fe20dc0 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88813fe20dc0 dead000000000100 dead000000000122
head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 80, tgid 80 (kworker/u8:5), ts 93535996970, free_ts 93431323536
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x231/0x280 mm/page_alloc.c:1858
 prep_new_page mm/page_alloc.c:1866 [inline]
 get_page_from_freelist+0x24ba/0x2540 mm/page_alloc.c:3946
 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5226
 alloc_slab_page mm/slub.c:3278 [inline]
 allocate_slab+0x77/0x660 mm/slub.c:3467
 new_slab mm/slub.c:3525 [inline]
 refill_objects+0x339/0x3d0 mm/slub.c:7255
 refill_sheaf mm/slub.c:2816 [inline]
 __pcs_replace_empty_main+0x321/0x720 mm/slub.c:4651
 alloc_from_pcs mm/slub.c:4749 [inline]
 slab_alloc_node mm/slub.c:4883 [inline]
 __do_kmalloc_node mm/slub.c:5294 [inline]
 __kmalloc_noprof+0x474/0x760 mm/slub.c:5307
 kmalloc_noprof include/linux/slab.h:954 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 neigh_alloc net/core/neighbour.c:521 [inline]
 ___neigh_create+0x6d5/0x2250 net/core/neighbour.c:655
 ip6_finish_output2+0x729/0x13e0 net/ipv6/ip6_output.c:128
 NF_HOOK_COND include/linux/netfilter.h:307 [inline]
 ip6_output+0x340/0x550 net/ipv6/ip6_output.c:246
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:318 [inline]
 ndisc_send_skb+0xd0b/0x1670 net/ipv6/ndisc.c:512
 addrconf_dad_completed+0x909/0xe60 net/ipv6/addrconf.c:4372
 addrconf_dad_work+0xc5e/0x14c0 net/ipv6/addrconf.c:-1
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x389/0x470 kernel/kthread.c:436
page last free pid 5772 tgid 5772 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1402 [inline]
 __free_frozen_pages+0xbc7/0xd30 mm/page_alloc.c:2943
 __slab_free+0x274/0x2c0 mm/slub.c:5612
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4569 [inline]
 slab_alloc_node mm/slub.c:4898 [inline]
 __do_kmalloc_node mm/slub.c:5294 [inline]
 __kmalloc_noprof+0x316/0x760 mm/slub.c:5307
 kmalloc_noprof include/linux/slab.h:954 [inline]
 tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x283/0x560 security/tomoyo/file.c:827
 security_inode_getattr+0x12b/0x310 security/security.c:1895
 vfs_getattr fs/stat.c:259 [inline]
 vfs_fstat fs/stat.c:281 [inline]
 __do_sys_newfstat fs/stat.c:551 [inline]
 __se_sys_newfstat fs/stat.c:546 [inline]
 __x64_sys_newfstat+0x13b/0x270 fs/stat.c:546
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff88803492a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88803492aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88803492aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                     ^
 ffff88803492ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88803492ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================