Extracting prog: 11m45.22343716s
Minimizing prog: 6h52m22.778745064s
Simplifying prog options: 17m49.208957239s
Extracting C: 5m12.389886986s
Simplifying C: 0s


24 programs, timeouts [30s 1m40s 6m0s]
extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-socket-bpf$auto-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r5=>0x0})
socket(0x1, 0x4, 0x1)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 14, 40, 28, 15, 18, 7, 11, 13, 9, 9, 30, 5, 29, 30, 30, 5, 9, 8, 3, 20, 19, 13, 40]
detailed listing:
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0)
r2 = socket(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0xc01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40094)
mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000)
recvmsg$auto(0x4, 0x0, 0x33c)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "21ae6bdf236b"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000)
socket(0xa, 0x801, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r2)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r6)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fadbdf25040000008a0016001a"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone3$auto(0x0, 0x1000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0xc, 0x11, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48840}, 0x10)
sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80400020}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x164, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MAX_NUM_AKM_SUITES={0x70, 0x13c, "26ba5c3bf6adbfe40018f254bc734d91df665e723189a0567fa59c73a93b71ccddd2ff95c6005c91637c965baed5829c7378f6d7efa8f791e19fc23e7c8e0f9835b5c7a66ca81de776ef63de53884251bd216baf7ec0de2f31d3c68275c93613e14b088814f5a7aa32a23045"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x96, 0xe8, "02088d99934ef1fdd89c589a77f03a79558c4208c52f7a1e9f278e3167ac4c0001e2d456ef621ad6af57fc4673553b5eb69d03bee18f670d9dd97bc83a06f4d2d9bbca3bf3b3b80ffab929c2a5dbd1e74e406eb4f1a8782793dd4b65ca5d85def93d2b66d9707f131864edc0374741f438559dcb66cf219b3da7f8a053d604d569c1f323206f177c42df1f11f27e81a0201a"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xbcd}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x9}, @NL80211_ATTR_BSS_SELECT={0x23, 0xe3, "3afc539b3ff2e492182dc045dc33781270809ab859441e5b225772aa7dc1da"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}]}, 0x164}, 0x1, 0x0, 0x0, 0x34040081}, 0x4000)
executing program 1:
r0 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000002280), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$auto_IEEE802154_DEL_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042bb57000fedbdf2522000000050027000600000005002b00a3000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async)
fanotify_mark$auto(0x1, 0x56d, 0xa, 0x8, 0xfffffffffffffffc) (async)
madvise$auto(0x0, 0xffffffffffff0081, 0x15)
mprotect$auto(0x1ffff000, 0x8007, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0xa040, 0x0) (async)
fchown$auto(0x5, 0x8, 0x40004) (async)
open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40)
sendfile$auto(0x9, 0x2, &(0x7f0000000000)=0x2, 0x83) (async, rerun: 64)
read$auto(0x7, &(0x7f0000000180)='nl80211\x00', 0x401) (rerun: 64)
executing program 1:
r0 = socket(0x23, 0x1, 0x1000200)
close_range$auto(0xffff, 0x8, 0x5)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000c}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x11, 0x1a, "0f18dc811e1718c3a92cad3710"}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1ff}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c885}, 0x121)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x3}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}, @NL802154_ATTR_PID={0x8, 0x1c, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4000)
socket(0x2, 0x1, 0x5) (async)
r2 = socket(0x2, 0x1, 0x5)
fstatfs$auto(0x6ee, &(0x7f0000000280)={0x6, 0x80000000, 0x5, 0xfffffffffffffffd, 0xd3d, 0x2bbe8704, 0x4, {[0xd1, 0x4]}, 0x2, 0x1, 0x101, [0x7, 0x8, 0x6, 0x1ff]}) (async)
fstatfs$auto(0x6ee, &(0x7f0000000280)={0x6, 0x80000000, 0x5, 0xfffffffffffffffd, 0xd3d, 0x2bbe8704, 0x4, {[0xd1, 0x4]}, 0x2, 0x1, 0x101, [0x7, 0x8, 0x6, 0x1ff]})
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x401}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x40)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000480), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x35e9e98593f359ae}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x7ff}, @BATADV_ATTR_MESH_IFNAME={0xc, 0x4, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004084) (async)
sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x35e9e98593f359ae}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x7ff}, @BATADV_ATTR_MESH_IFNAME={0xc, 0x4, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004084)
syz_genetlink_get_family_id$auto_ila(&(0x7f00000005c0), r0) (async)
syz_genetlink_get_family_id$auto_ila(&(0x7f00000005c0), r0)
r6 = open(&(0x7f0000000600)='./file0\x00', 0x14001, 0x100)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000680), r0) (async)
r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000680), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x3}, @NFSD_A_SERVER_THREADS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x10)
madvise$auto(0xffffffffffffffff, 0xa5, 0x400)
sendmsg$auto_NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa8, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_MAC_MASK={0x1f, 0xd7, "79dd197a32c70dc2524d2ecc15a27985b7179a1b8764b8d01aec16"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfffffffd}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x54, 0xba, "c73944350ebef3f403e411c640ac95a58ae0c49d26fbad4df2908e225a52ae34cac914d8324b4e1aefc228eb653746ba6468f43e84375d3c565fb1cfbcc6c7f30d68e282ed196e6254d9ac0e4b58b5e6"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x220040c4}, 0x4040)
close_range$auto(0x12a, 0x5, 0x9)
madvise$auto(0xfffffffffffff593, 0x7, 0x4) (async)
madvise$auto(0xfffffffffffff593, 0x7, 0x4)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000940), r6) (async)
r8 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000940), r6)
sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="63fe34d5891de3efeb08b13f0f044746"}}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr16=[0x5, 0x3, 0x100, 0x60, 0x5, 0x6, 0x7ff, 0xb]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000) (async)
sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="63fe34d5891de3efeb08b13f0f044746"}}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr16=[0x5, 0x3, 0x100, 0x60, 0x5, 0x6, 0x7ff, 0xb]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000ac0), r0)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x241001}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r10, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x7}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x8}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x1}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0xe90}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x3}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x5}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x1bb}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x7b}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r10, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x8800) (async)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r10, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x8800)
setns$auto(0x100, 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d40), r6)
sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r11, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x7, 0x1, "29e4b3"}, @ETHTOOL_A_LINKSTATE_HEADER={0x7, 0x1, "dc6784"}]}, 0x24}, 0x1, 0x0, 0x0, 0x43}, 0x4004)
executing program 1:
socket(0x1e, 0x3, 0x4001)
write$auto(0x3, 0x0, 0x81)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x4, 0x84, 0x3, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7, 0x42)
mmap$auto(0xf000, 0x8, 0x7fffffffffffffff, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8)
mbind$auto(0x400, 0x9, 0x9ae5, &(0x7f0000000000)=0x25, 0x5, 0x9)
setrlimit$auto(0x8, 0xffffffffffffffff)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
futex$auto(0xfffffffffffffffe, 0x8, 0x7, 0x0, 0xfffffffffffffffc, 0x7fffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="362c722a797e0903042050ca110b26bd7000fddbdf350d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008051}, 0x4000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x15, 0x5, 0x0)
poll$auto(0x0, 0x2, 0xc)
executing program 1:
memfd_create$auto(0xfffffffffffffffe, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mlockall$auto(0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mincore$auto(0x0, 0x8000000000005a, 0x0)
pipe2$auto(0x0, 0x80)
tkill$auto(0x80000000000001, 0x7)
kcmp$auto(0x1, 0x1, 0x3, 0x85, 0x2)
bpf$auto(0x10, 0x0, 0x9)
socket(0xa, 0x6, 0x0)
setsockopt$auto(0x3, 0x29, 0x1f, 0xffffffffffffffff, 0x3)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x3a, 0xffffffffffffffff, 0x3)
mprotect$auto(0x1ffff000, 0x810002, 0x5)
executing program 1:
mbind$auto(0xf000, 0x8000000000000001, 0x1, 0x0, 0x6, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x106)
bind$auto(0x8, 0xfffffffffffffffd, 0x0)
socket(0x10, 0x3, 0x6)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002f40), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
inotify_init1$auto(0x100)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
executing program 2:
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mmap$auto(0x800, 0x100000000, 0x0, 0x55879b94, 0x8, 0x0) (async)
clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001)
move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2)
executing program 2:
ioperm$auto(0x5, 0x6, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1e, 0x401, 0x8000)
dup2$auto(0x0, 0x3)
pwritev2$auto(0x3, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xc)
keyctl$auto(0x4, 0xfffffffd, 0x6, 0xffffffffffffffff, 0xb8a)
mmap$auto(0xe, 0x8, 0x2, 0x17, 0xfffffffffffffffc, 0x80000000)
ioperm$auto(0x4, 0x10001, 0x5)
fsetxattr$auto(0x699d, 0x0, 0x0, 0x4, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000440), 0xffffffffffffffff)
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7)
epoll_create$auto(0x4)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mq_notify$auto(0x6f7, 0x0)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
acct$auto(&(0x7f0000000000)='nfsd\x00')
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mprotect$auto(0x1000, 0x3, 0xe)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250200000011000400"], 0x28}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
executing program 3:
bpf$auto(0x9, 0x0, 0x0) (async)
bpf$auto(0x9, 0x0, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x2, 0x4)
mknod$auto(&(0x7f0000000280)='$}\x00', 0x0, 0xfffffffd)
mknod$auto(&(0x7f00000002c0)='&-\x00', 0x0, 0x6) (async)
mknod$auto(&(0x7f00000002c0)='&-\x00', 0x0, 0x6)
socket(0x21, 0x2, 0x2)
connect$auto(0x3, &(0x7f0000000180)={0x5, @sockaddr_1_1}, 0x54)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000000)='$}\x00')
executing program 3:
close_range$auto(0x0, 0xe903, 0x2)
socket(0x2, 0x1, 0x0)
mmap$auto(0xfffffffffffffffd, 0x8, 0xdf, 0x40009b72, 0x80000000008, 0x8000)
alarm$auto(0x0)
mmap$auto(0x2, 0x20007, 0xdd, 0xeb1, 0x40000000401, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
umount2$auto(0x0, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x1f, 0x1, 0xfffffffc)
socket(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x9, 0xdf, 0x15, 0x2b, 0x8000)
socket(0xa, 0x801, 0x106)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9)
listen$auto(0x0, 0x4)
alarm$auto(0x8)
socket(0x2b, 0x1, 0x1)
eventfd$auto(0xfffffff8)
connect$auto(0x3, &(0x7f00000000c0)={0x2, @sa_data_min="1177f7a996c03917d3da2361b47d"}, 0x5)
lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6)
listen$auto(0x3, 0x81)
socket(0x10, 0x3, 0x0)
mmap$auto(0x0, 0x7, 0xdb, 0x571249d, 0x5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x2, 0x400005, 0xdf, 0x9b72, 0x10000005, 0x8002)
io_setup$auto(0x1, &(0x7f0000000040)=0x4)
llistxattr$auto(&(0x7f0000000080), 0x0, 0x200ce3e)
epoll_create$auto(0x4)
fsconfig$auto(0x6, 0x6, 0x0, 0xfffffffffffffffe, 0x2)
socket(0x2, 0x1, 0x0)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
semctl$auto(0x1, 0x9, 0x40, 0x9f) (async)
r0 = socket(0x2, 0x801, 0x100)
fcntl$auto(0x4, 0x4, 0xa553)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0)
executing program 3:
r0 = socket(0x1e, 0x4, 0x0)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x40000a, 0xde, 0x809b72, 0x10000000006, 0x8000)
io_setup$auto(0x1, 0x0)
io_setup$auto(0x9e, &(0x7f0000000000))
listen$auto(0x3, 0x81)
shutdown$auto(0x200000003, 0x2)
socket(0x1, 0x2, 0x0)
listen$auto(0x7f9e, 0xf)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
rt_sigaction$auto(0x11, &(0x7f0000000100)={0x0, 0x2000004, 0x0, {0x7}}, 0x0, 0x8)
setrlimit$auto(0x1000000007, 0x0)
socket(0xa, 0x801, 0x84)
sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c148b73a55b00000000003500000000", @ANYRES16=r2, @ANYBLOB="000229bd7000ffdbdf251100000007000100b2926300"], 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8840)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fddbdf25050000000500070000000400050006000e00000027000300faf975b5ec83e77182871571f72f11e0a5e9d7a6d0c4960089ec0e1bae83ca886405470005000700050000000800050000000100"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x84)
socket(0x2b, 0x2, 0x1)
rseq$auto(0xffffffffffffffff, 0xc8f, 0x0, 0x2)
select$auto(0x3aee, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40000a, 0xe2, 0xfffffffffffffff4, 0x0, 0x8000)
mmap$auto(0x0, 0x20109, 0xdf, 0xeb1, 0x3fd, 0x8000)
socket(0x22, 0x6efb7d17b8f91f90, 0x7)
socket(0x1d, 0x2, 0x7)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x18000000, 0x0, 0x3)
io_setup$auto(0x10000, &(0x7f0000000040))
executing program 0:
connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55)
mmap$auto(0x0, 0x8044, 0x7, 0x1a, 0x4000000080000000, 0x800008000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b76, 0x2, 0x808000)
timer_create$auto(0x8, 0x0, 0x0)
timer_gettime$auto(0x0, 0xfffffffffffffffc)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
ioctl$NS_GET_PARENT(r0, 0xb701, 0x0)
mprotect$auto(0x40, 0x9, 0xf)
gettimeofday$auto(&(0x7f0000000000)={0x3, 0x2}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioperm$auto(0x1000, 0x9b, 0x6)
pkey_free$auto(0x89)
epoll_pwait$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffff, 0x0, 0x963)
socket(0x0, 0x2, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
madvise$auto(0x0, 0x80000001, 0x4)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="1d00f990d90bf687cf04004ee93825a8ce517e875ebcee205ed6a5c452315080c823fe4c78d0752a4879074013ac70be01515ddb50e872a519bddbe4df8f4c0e4c362778c6fc8b5e222ad2fdc7140c7a7e130652df71ff87"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40094)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x9, 0xdf, 0xeb4, 0xd17, 0x100000000)
setsockopt$auto(0x200000000000003, 0x1, 0x29, 0x0, 0x300)
socket(0x15, 0x5, 0x0)
ioctl$auto(0x3, 0x7, 0x7)
socket(0x2, 0x5, 0x0)
listen$auto(0x8, 0xfffffffd)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x1, 0x8000000000020002, 0x10000000000df, 0x80000010, 0xae000000, 0x8000)
recvmsg$auto(0x4, 0x0, 0x33c)
clone$auto(0x5, 0x8, 0x0, 0x0, 0x3)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
executing program 2:
mmap$auto(0x3, 0x1ff, 0x2, 0x17, 0x9, 0x7fffffff) (async)
setresuid$auto(0x401, 0x1, 0x7ff)
ioctl$auto(0x60, 0x85a, 0x7) (async, rerun: 32)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x952, 0x7fffffffffffffff}, 0xbf2, 0x4) (rerun: 32)
madvise$auto(0xfff, 0x6e0ee84b, 0x236)
landlock_create_ruleset$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x8}, 0x9, 0x9) (async)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x19) (async)
madvise$auto(0x9, 0x6, 0x10001)
open(&(0x7f00000000c0)='./file0\x00', 0x8a002, 0x82)
close_range$auto(0x84, 0x10000, 0x9) (async)
landlock_create_ruleset$auto(&(0x7f0000000100)={0x2319, 0x4}, 0x9, 0x6) (async, rerun: 64)
landlock_create_ruleset$auto(&(0x7f0000000140)={0xfffffffffffffffe, 0x8}, 0x3, 0xfffffffe) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc7e237505f982b96}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1bc, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x75}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x76b}, @NL802154_ATTR_SCAN_MEAN_PRF={0xf6, 0x23, "fd52c94141726ee72b2ce3b2633712c173212145ba92be851bb2d617e907aa3be73723e9db904eeffc7d89423de0db551ba13829b13f4be41f2909dc25fb2faa618ed9a6b27677fe4469375e09dee4345e271326b6ceb84c4f3f0b45e85844a096394d26de28b6d9b3e4198a3e67def470d37d14920fa4db6d7ffeebe85c65395c4b206507eab2c884e758525e4ec7644c1cbd902cc077b969820285346f2b6bbec923f0c56909ce2ff92018a3ab68e2cd5795d8deac842fd988269d8faf86374741dc0e2276aef4ea065d304fca0495bcb8bc2355bbb4cbb497a8215c222868f41f186aa2c9e0a12885168228fa89210cc9"}, @NL802154_ATTR_SEC_KEY={0x75, 0x30, "bbc84b9d220fa0c940ea72546c673eaa613818db7a6f91f4781ae7301c5cc5af65c5394a45e6561fd4b83dd89c2d79f931ca1aa6329ffafef5a119274104807234cb3a96925a895d8f610f55cd1c75c81d3f6eee47b63b6ee5eb5c81b390734c085812f735df190a60d429d6dd3dd2c11d"}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xbb}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x5b5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x40010) (async, rerun: 32)
fcntl$auto(0x6, 0x9, 0x4) (rerun: 32)
socket(0xa, 0xa, 0x9) (async, rerun: 64)
getsockopt$auto(0x7, 0x3, 0x0, &(0x7f0000000440)='nl802154\x00', &(0x7f0000000480)=0xffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_NCSI(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44041}, 0x20000804) (async)
ioprio_set$auto(0x101, 0x8000, 0x9) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ila(&(0x7f0000000600), r2)
close_range$auto(0xc85, 0x1, 0x9) (async)
open(&(0x7f0000000640)='./file0/file0\x00', 0x400, 0x42) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'veth0_to_team\x00', <r5=>0x0})
sendmsg$auto_NCSI_CMD_PKG_INFO(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NCSI_ATTR_PACKAGE_LIST={0x5c, 0x2, "c9633ca698273316886137d7ffd61d76d6d04d1669d95b7cbe731127ce33efb86d4d3bb6cf547d9c8b26f63651068ea685c535eb675604d5805fecaa559b596e0e4a4710e96201387c89f1d259e3931f15d4d2a18f1607d2"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x1091)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000880), r4)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x50c2}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0xff}, @ETHTOOL_A_RINGS_HEADER={0x7, 0x1, 'oa2'}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5, 0xb, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
setreuid$auto(0x3, 0x7) (async)
ioperm$auto(0x7, 0x6, 0x2) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000080), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004)
sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_DEST_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x800)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x801, 0x100)
sendmsg$auto_NL80211_CMD_START_AP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40910}, 0x20000000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd)
sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c040)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000006c0), r0)
r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000cc0), r0)
sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
executing program 0:
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x208, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x10000000, 0x7f, 0x77, 0x1, 0x8, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x0, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0x5, 0x8, 0x5, 0x1, 0x800, 0x9, 0x5, 0x2, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2ba, 0x4, 0xf, 0xffffffffffffff26, 0x9, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0x800, 0x0)
poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) (async)
ioperm$auto(0x7, 0x6, 0x2) (async)
sched_rr_get_interval$auto(0x0, &(0x7f0000001280)={0x3, 0x6})
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x14, 0x3, 0x8003) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
socket(0x1d, 0x3, 0x1) (async)
getsockopt$auto(0x6, 0x65, 0x2, 0xffffffffffffffff, 0x0) (async)
fsetxattr$auto(0xfffffff9, &(0x7f0000000180)='nfsd\x00', &(0x7f00000001c0)="9dfe556e7fdd0baba4a265396bde91343b4191ddc4efe934bea42d81adcd605307a5bae9e259f915c58550ebb565903312e954209b03735323307395443eacac08257efcdd2763a66938f12ca37f8bc275dd4e48900673a9c7c18e6f5712443f85858e9f168e9284db5f4036d291d53e01808bd43214ae45a5a189e797deb2982a2339e80fe32531d479138ab4b506ec6dfbbcf29a9ea8a6dc354a591b44c85dba896465834ec0d5efd17f27467caf1785211a614b60fb279dcc9594003ed9af0633b75c82bed48432913aa5f9d69bb2e535fb7274b2f12aa126138bdfaaa51986c373b3366f5d667914186ace8a64998c714579", 0x800, 0x100) (async)
ioperm$auto(0x800, 0x5, 0xd) (async)
kcmp$auto(0x1, 0x1, 0x3, 0x85, 0x2) (async)
keyctl$auto(0x15, 0x725fffffffb, 0x69c9, 0x2, 0x6) (async)
setreuid$auto(0xffffffff, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
get_mempolicy$auto(0x0, &(0x7f0000000bc0)=0x6dc, 0x7b72, 0x8, 0x4)
setsockopt$auto(0x4, 0x84, 0x82, 0xfffffffffffffffe, 0x0)
keyctl$auto(0x0, 0x10, 0x1, 0x8, 0x7fcb629d)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
exit$auto(0x7) (async)
unshare$auto(0x40000080) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, 0x0, 0x8800)
close_range$auto(0x2, 0x8, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
socket(0x1, 0x1, 0x1) (async)
write$auto(0x3, 0x0, 0x100082) (async)
socket(0xa, 0x3, 0x3a) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x1, 0x0) (async)
socket(0x2b, 0x1, 0x1)
socket(0x1d, 0x2, 0x2) (async)
socket(0x2, 0x1, 0x106) (async)
setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) (async)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="21012dbd7000fb00df25050000000800040010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40084)
epoll_create$auto(0x4)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mq_notify$auto(0x6f7, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r5=>0x0})
socket(0x1, 0x4, 0x1)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-socket-bpf$auto-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r5=>0x0})
socket(0x1, 0x4, 0x1)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 14, 40, 28, 15, 18, 7, 11, 13, 9, 9, 30, 5, 29, 30, 30, 5, 9, 8, 3, 20, 19, 13, 40]
detailed listing:
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0)
r2 = socket(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0xc01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40094)
mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000)
recvmsg$auto(0x4, 0x0, 0x33c)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "21ae6bdf236b"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000)
socket(0xa, 0x801, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r2)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r6)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fadbdf25040000008a0016001a"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone3$auto(0x0, 0x1000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0xc, 0x11, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48840}, 0x10)
sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80400020}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x164, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MAX_NUM_AKM_SUITES={0x70, 0x13c, "26ba5c3bf6adbfe40018f254bc734d91df665e723189a0567fa59c73a93b71ccddd2ff95c6005c91637c965baed5829c7378f6d7efa8f791e19fc23e7c8e0f9835b5c7a66ca81de776ef63de53884251bd216baf7ec0de2f31d3c68275c93613e14b088814f5a7aa32a23045"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x96, 0xe8, "02088d99934ef1fdd89c589a77f03a79558c4208c52f7a1e9f278e3167ac4c0001e2d456ef621ad6af57fc4673553b5eb69d03bee18f670d9dd97bc83a06f4d2d9bbca3bf3b3b80ffab929c2a5dbd1e74e406eb4f1a8782793dd4b65ca5d85def93d2b66d9707f131864edc0374741f438559dcb66cf219b3da7f8a053d604d569c1f323206f177c42df1f11f27e81a0201a"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xbcd}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x9}, @NL80211_ATTR_BSS_SELECT={0x23, 0xe3, "3afc539b3ff2e492182dc045dc33781270809ab859441e5b225772aa7dc1da"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}]}, 0x164}, 0x1, 0x0, 0x0, 0x34040081}, 0x4000)
executing program 1:
r0 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000002280), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$auto_IEEE802154_DEL_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042bb57000fedbdf2522000000050027000600000005002b00a3000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async)
fanotify_mark$auto(0x1, 0x56d, 0xa, 0x8, 0xfffffffffffffffc) (async)
madvise$auto(0x0, 0xffffffffffff0081, 0x15)
mprotect$auto(0x1ffff000, 0x8007, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0xa040, 0x0) (async)
fchown$auto(0x5, 0x8, 0x40004) (async)
open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40)
sendfile$auto(0x9, 0x2, &(0x7f0000000000)=0x2, 0x83) (async, rerun: 64)
read$auto(0x7, &(0x7f0000000180)='nl80211\x00', 0x401) (rerun: 64)
executing program 1:
r0 = socket(0x23, 0x1, 0x1000200)
close_range$auto(0xffff, 0x8, 0x5)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000c}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x11, 0x1a, "0f18dc811e1718c3a92cad3710"}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1ff}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c885}, 0x121)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x3}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}, @NL802154_ATTR_PID={0x8, 0x1c, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4000)
socket(0x2, 0x1, 0x5) (async)
r2 = socket(0x2, 0x1, 0x5)
fstatfs$auto(0x6ee, &(0x7f0000000280)={0x6, 0x80000000, 0x5, 0xfffffffffffffffd, 0xd3d, 0x2bbe8704, 0x4, {[0xd1, 0x4]}, 0x2, 0x1, 0x101, [0x7, 0x8, 0x6, 0x1ff]}) (async)
fstatfs$auto(0x6ee, &(0x7f0000000280)={0x6, 0x80000000, 0x5, 0xfffffffffffffffd, 0xd3d, 0x2bbe8704, 0x4, {[0xd1, 0x4]}, 0x2, 0x1, 0x101, [0x7, 0x8, 0x6, 0x1ff]})
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x401}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x40)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000480), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x35e9e98593f359ae}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x7ff}, @BATADV_ATTR_MESH_IFNAME={0xc, 0x4, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004084) (async)
sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x35e9e98593f359ae}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x7ff}, @BATADV_ATTR_MESH_IFNAME={0xc, 0x4, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004084)
syz_genetlink_get_family_id$auto_ila(&(0x7f00000005c0), r0) (async)
syz_genetlink_get_family_id$auto_ila(&(0x7f00000005c0), r0)
r6 = open(&(0x7f0000000600)='./file0\x00', 0x14001, 0x100)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000680), r0) (async)
r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000680), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x3}, @NFSD_A_SERVER_THREADS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x10)
madvise$auto(0xffffffffffffffff, 0xa5, 0x400)
sendmsg$auto_NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa8, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_MAC_MASK={0x1f, 0xd7, "79dd197a32c70dc2524d2ecc15a27985b7179a1b8764b8d01aec16"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfffffffd}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x54, 0xba, "c73944350ebef3f403e411c640ac95a58ae0c49d26fbad4df2908e225a52ae34cac914d8324b4e1aefc228eb653746ba6468f43e84375d3c565fb1cfbcc6c7f30d68e282ed196e6254d9ac0e4b58b5e6"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x220040c4}, 0x4040)
close_range$auto(0x12a, 0x5, 0x9)
madvise$auto(0xfffffffffffff593, 0x7, 0x4) (async)
madvise$auto(0xfffffffffffff593, 0x7, 0x4)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000940), r6) (async)
r8 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000940), r6)
sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="63fe34d5891de3efeb08b13f0f044746"}}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr16=[0x5, 0x3, 0x100, 0x60, 0x5, 0x6, 0x7ff, 0xb]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000) (async)
sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="63fe34d5891de3efeb08b13f0f044746"}}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr16=[0x5, 0x3, 0x100, 0x60, 0x5, 0x6, 0x7ff, 0xb]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000ac0), r0)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x241001}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r10, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x7}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x8}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x1}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0xe90}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x3}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x5}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x1bb}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x7b}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r10, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x8800) (async)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r10, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x8800)
setns$auto(0x100, 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d40), r6)
sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r11, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x7, 0x1, "29e4b3"}, @ETHTOOL_A_LINKSTATE_HEADER={0x7, 0x1, "dc6784"}]}, 0x24}, 0x1, 0x0, 0x0, 0x43}, 0x4004)
executing program 1:
socket(0x1e, 0x3, 0x4001)
write$auto(0x3, 0x0, 0x81)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x4, 0x84, 0x3, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7, 0x42)
mmap$auto(0xf000, 0x8, 0x7fffffffffffffff, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8)
mbind$auto(0x400, 0x9, 0x9ae5, &(0x7f0000000000)=0x25, 0x5, 0x9)
setrlimit$auto(0x8, 0xffffffffffffffff)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
futex$auto(0xfffffffffffffffe, 0x8, 0x7, 0x0, 0xfffffffffffffffc, 0x7fffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="362c722a797e0903042050ca110b26bd7000fddbdf350d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008051}, 0x4000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x15, 0x5, 0x0)
poll$auto(0x0, 0x2, 0xc)
executing program 1:
memfd_create$auto(0xfffffffffffffffe, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mlockall$auto(0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mincore$auto(0x0, 0x8000000000005a, 0x0)
pipe2$auto(0x0, 0x80)
tkill$auto(0x80000000000001, 0x7)
kcmp$auto(0x1, 0x1, 0x3, 0x85, 0x2)
bpf$auto(0x10, 0x0, 0x9)
socket(0xa, 0x6, 0x0)
setsockopt$auto(0x3, 0x29, 0x1f, 0xffffffffffffffff, 0x3)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x3a, 0xffffffffffffffff, 0x3)
mprotect$auto(0x1ffff000, 0x810002, 0x5)
executing program 1:
mbind$auto(0xf000, 0x8000000000000001, 0x1, 0x0, 0x6, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x106)
bind$auto(0x8, 0xfffffffffffffffd, 0x0)
socket(0x10, 0x3, 0x6)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002f40), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
inotify_init1$auto(0x100)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
executing program 2:
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mmap$auto(0x800, 0x100000000, 0x0, 0x55879b94, 0x8, 0x0) (async)
clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001)
move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2)
executing program 2:
ioperm$auto(0x5, 0x6, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1e, 0x401, 0x8000)
dup2$auto(0x0, 0x3)
pwritev2$auto(0x3, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xc)
keyctl$auto(0x4, 0xfffffffd, 0x6, 0xffffffffffffffff, 0xb8a)
mmap$auto(0xe, 0x8, 0x2, 0x17, 0xfffffffffffffffc, 0x80000000)
ioperm$auto(0x4, 0x10001, 0x5)
fsetxattr$auto(0x699d, 0x0, 0x0, 0x4, 0x0)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000440), 0xffffffffffffffff)
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7)
epoll_create$auto(0x4)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mq_notify$auto(0x6f7, 0x0)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
acct$auto(&(0x7f0000000000)='nfsd\x00')
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mprotect$auto(0x1000, 0x3, 0xe)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250200000011000400"], 0x28}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
executing program 3:
bpf$auto(0x9, 0x0, 0x0) (async)
bpf$auto(0x9, 0x0, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x2, 0x4)
mknod$auto(&(0x7f0000000280)='$}\x00', 0x0, 0xfffffffd)
mknod$auto(&(0x7f00000002c0)='&-\x00', 0x0, 0x6) (async)
mknod$auto(&(0x7f00000002c0)='&-\x00', 0x0, 0x6)
socket(0x21, 0x2, 0x2)
connect$auto(0x3, &(0x7f0000000180)={0x5, @sockaddr_1_1}, 0x54)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000000)='$}\x00')
executing program 3:
close_range$auto(0x0, 0xe903, 0x2)
socket(0x2, 0x1, 0x0)
mmap$auto(0xfffffffffffffffd, 0x8, 0xdf, 0x40009b72, 0x80000000008, 0x8000)
alarm$auto(0x0)
mmap$auto(0x2, 0x20007, 0xdd, 0xeb1, 0x40000000401, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
umount2$auto(0x0, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x1f, 0x1, 0xfffffffc)
socket(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x9, 0xdf, 0x15, 0x2b, 0x8000)
socket(0xa, 0x801, 0x106)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9)
listen$auto(0x0, 0x4)
alarm$auto(0x8)
socket(0x2b, 0x1, 0x1)
eventfd$auto(0xfffffff8)
connect$auto(0x3, &(0x7f00000000c0)={0x2, @sa_data_min="1177f7a996c03917d3da2361b47d"}, 0x5)
lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6)
listen$auto(0x3, 0x81)
socket(0x10, 0x3, 0x0)
mmap$auto(0x0, 0x7, 0xdb, 0x571249d, 0x5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x2, 0x400005, 0xdf, 0x9b72, 0x10000005, 0x8002)
io_setup$auto(0x1, &(0x7f0000000040)=0x4)
llistxattr$auto(&(0x7f0000000080), 0x0, 0x200ce3e)
epoll_create$auto(0x4)
fsconfig$auto(0x6, 0x6, 0x0, 0xfffffffffffffffe, 0x2)
socket(0x2, 0x1, 0x0)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
semctl$auto(0x1, 0x9, 0x40, 0x9f) (async)
r0 = socket(0x2, 0x801, 0x100)
fcntl$auto(0x4, 0x4, 0xa553)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0)
executing program 3:
r0 = socket(0x1e, 0x4, 0x0)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x40000a, 0xde, 0x809b72, 0x10000000006, 0x8000)
io_setup$auto(0x1, 0x0)
io_setup$auto(0x9e, &(0x7f0000000000))
listen$auto(0x3, 0x81)
shutdown$auto(0x200000003, 0x2)
socket(0x1, 0x2, 0x0)
listen$auto(0x7f9e, 0xf)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
rt_sigaction$auto(0x11, &(0x7f0000000100)={0x0, 0x2000004, 0x0, {0x7}}, 0x0, 0x8)
setrlimit$auto(0x1000000007, 0x0)
socket(0xa, 0x801, 0x84)
sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c148b73a55b00000000003500000000", @ANYRES16=r2, @ANYBLOB="000229bd7000ffdbdf251100000007000100b2926300"], 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8840)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fddbdf25050000000500070000000400050006000e00000027000300faf975b5ec83e77182871571f72f11e0a5e9d7a6d0c4960089ec0e1bae83ca886405470005000700050000000800050000000100"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x84)
socket(0x2b, 0x2, 0x1)
rseq$auto(0xffffffffffffffff, 0xc8f, 0x0, 0x2)
select$auto(0x3aee, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40000a, 0xe2, 0xfffffffffffffff4, 0x0, 0x8000)
mmap$auto(0x0, 0x20109, 0xdf, 0xeb1, 0x3fd, 0x8000)
socket(0x22, 0x6efb7d17b8f91f90, 0x7)
socket(0x1d, 0x2, 0x7)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x18000000, 0x0, 0x3)
io_setup$auto(0x10000, &(0x7f0000000040))
executing program 0:
connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55)
mmap$auto(0x0, 0x8044, 0x7, 0x1a, 0x4000000080000000, 0x800008000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b76, 0x2, 0x808000)
timer_create$auto(0x8, 0x0, 0x0)
timer_gettime$auto(0x0, 0xfffffffffffffffc)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
ioctl$NS_GET_PARENT(r0, 0xb701, 0x0)
mprotect$auto(0x40, 0x9, 0xf)
gettimeofday$auto(&(0x7f0000000000)={0x3, 0x2}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioperm$auto(0x1000, 0x9b, 0x6)
pkey_free$auto(0x89)
epoll_pwait$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffff, 0x0, 0x963)
socket(0x0, 0x2, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
madvise$auto(0x0, 0x80000001, 0x4)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="1d00f990d90bf687cf04004ee93825a8ce517e875ebcee205ed6a5c452315080c823fe4c78d0752a4879074013ac70be01515ddb50e872a519bddbe4df8f4c0e4c362778c6fc8b5e222ad2fdc7140c7a7e130652df71ff87"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40094)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x9, 0xdf, 0xeb4, 0xd17, 0x100000000)
setsockopt$auto(0x200000000000003, 0x1, 0x29, 0x0, 0x300)
socket(0x15, 0x5, 0x0)
ioctl$auto(0x3, 0x7, 0x7)
socket(0x2, 0x5, 0x0)
listen$auto(0x8, 0xfffffffd)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x1, 0x8000000000020002, 0x10000000000df, 0x80000010, 0xae000000, 0x8000)
recvmsg$auto(0x4, 0x0, 0x33c)
clone$auto(0x5, 0x8, 0x0, 0x0, 0x3)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
executing program 2:
mmap$auto(0x3, 0x1ff, 0x2, 0x17, 0x9, 0x7fffffff) (async)
setresuid$auto(0x401, 0x1, 0x7ff)
ioctl$auto(0x60, 0x85a, 0x7) (async, rerun: 32)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x952, 0x7fffffffffffffff}, 0xbf2, 0x4) (rerun: 32)
madvise$auto(0xfff, 0x6e0ee84b, 0x236)
landlock_create_ruleset$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x8}, 0x9, 0x9) (async)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x19) (async)
madvise$auto(0x9, 0x6, 0x10001)
open(&(0x7f00000000c0)='./file0\x00', 0x8a002, 0x82)
close_range$auto(0x84, 0x10000, 0x9) (async)
landlock_create_ruleset$auto(&(0x7f0000000100)={0x2319, 0x4}, 0x9, 0x6) (async, rerun: 64)
landlock_create_ruleset$auto(&(0x7f0000000140)={0xfffffffffffffffe, 0x8}, 0x3, 0xfffffffe) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc7e237505f982b96}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1bc, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x75}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x76b}, @NL802154_ATTR_SCAN_MEAN_PRF={0xf6, 0x23, "fd52c94141726ee72b2ce3b2633712c173212145ba92be851bb2d617e907aa3be73723e9db904eeffc7d89423de0db551ba13829b13f4be41f2909dc25fb2faa618ed9a6b27677fe4469375e09dee4345e271326b6ceb84c4f3f0b45e85844a096394d26de28b6d9b3e4198a3e67def470d37d14920fa4db6d7ffeebe85c65395c4b206507eab2c884e758525e4ec7644c1cbd902cc077b969820285346f2b6bbec923f0c56909ce2ff92018a3ab68e2cd5795d8deac842fd988269d8faf86374741dc0e2276aef4ea065d304fca0495bcb8bc2355bbb4cbb497a8215c222868f41f186aa2c9e0a12885168228fa89210cc9"}, @NL802154_ATTR_SEC_KEY={0x75, 0x30, "bbc84b9d220fa0c940ea72546c673eaa613818db7a6f91f4781ae7301c5cc5af65c5394a45e6561fd4b83dd89c2d79f931ca1aa6329ffafef5a119274104807234cb3a96925a895d8f610f55cd1c75c81d3f6eee47b63b6ee5eb5c81b390734c085812f735df190a60d429d6dd3dd2c11d"}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xbb}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x5b5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x40010) (async, rerun: 32)
fcntl$auto(0x6, 0x9, 0x4) (rerun: 32)
socket(0xa, 0xa, 0x9) (async, rerun: 64)
getsockopt$auto(0x7, 0x3, 0x0, &(0x7f0000000440)='nl802154\x00', &(0x7f0000000480)=0xffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_NCSI(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44041}, 0x20000804) (async)
ioprio_set$auto(0x101, 0x8000, 0x9) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ila(&(0x7f0000000600), r2)
close_range$auto(0xc85, 0x1, 0x9) (async)
open(&(0x7f0000000640)='./file0/file0\x00', 0x400, 0x42) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'veth0_to_team\x00', <r5=>0x0})
sendmsg$auto_NCSI_CMD_PKG_INFO(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NCSI_ATTR_PACKAGE_LIST={0x5c, 0x2, "c9633ca698273316886137d7ffd61d76d6d04d1669d95b7cbe731127ce33efb86d4d3bb6cf547d9c8b26f63651068ea685c535eb675604d5805fecaa559b596e0e4a4710e96201387c89f1d259e3931f15d4d2a18f1607d2"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x1091)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000880), r4)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x50c2}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0xff}, @ETHTOOL_A_RINGS_HEADER={0x7, 0x1, 'oa2'}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5, 0xb, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
setreuid$auto(0x3, 0x7) (async)
ioperm$auto(0x7, 0x6, 0x2) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000080), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004)
sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_DEST_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x800)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x801, 0x100)
sendmsg$auto_NL80211_CMD_START_AP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40910}, 0x20000000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd)
sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c040)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000006c0), r0)
r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000cc0), r0)
sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
executing program 0:
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x208, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x10000000, 0x7f, 0x77, 0x1, 0x8, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x0, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0x5, 0x8, 0x5, 0x1, 0x800, 0x9, 0x5, 0x2, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2ba, 0x4, 0xf, 0xffffffffffffff26, 0x9, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0x800, 0x0)
poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) (async)
ioperm$auto(0x7, 0x6, 0x2) (async)
sched_rr_get_interval$auto(0x0, &(0x7f0000001280)={0x3, 0x6})
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x14, 0x3, 0x8003) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
socket(0x1d, 0x3, 0x1) (async)
getsockopt$auto(0x6, 0x65, 0x2, 0xffffffffffffffff, 0x0) (async)
fsetxattr$auto(0xfffffff9, &(0x7f0000000180)='nfsd\x00', &(0x7f00000001c0)="9dfe556e7fdd0baba4a265396bde91343b4191ddc4efe934bea42d81adcd605307a5bae9e259f915c58550ebb565903312e954209b03735323307395443eacac08257efcdd2763a66938f12ca37f8bc275dd4e48900673a9c7c18e6f5712443f85858e9f168e9284db5f4036d291d53e01808bd43214ae45a5a189e797deb2982a2339e80fe32531d479138ab4b506ec6dfbbcf29a9ea8a6dc354a591b44c85dba896465834ec0d5efd17f27467caf1785211a614b60fb279dcc9594003ed9af0633b75c82bed48432913aa5f9d69bb2e535fb7274b2f12aa126138bdfaaa51986c373b3366f5d667914186ace8a64998c714579", 0x800, 0x100) (async)
ioperm$auto(0x800, 0x5, 0xd) (async)
kcmp$auto(0x1, 0x1, 0x3, 0x85, 0x2) (async)
keyctl$auto(0x15, 0x725fffffffb, 0x69c9, 0x2, 0x6) (async)
setreuid$auto(0xffffffff, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
get_mempolicy$auto(0x0, &(0x7f0000000bc0)=0x6dc, 0x7b72, 0x8, 0x4)
setsockopt$auto(0x4, 0x84, 0x82, 0xfffffffffffffffe, 0x0)
keyctl$auto(0x0, 0x10, 0x1, 0x8, 0x7fcb629d)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
exit$auto(0x7) (async)
unshare$auto(0x40000080) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, 0x0, 0x8800)
close_range$auto(0x2, 0x8, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
socket(0x1, 0x1, 0x1) (async)
write$auto(0x3, 0x0, 0x100082) (async)
socket(0xa, 0x3, 0x3a) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x1, 0x0) (async)
socket(0x2b, 0x1, 0x1)
socket(0x1d, 0x2, 0x2) (async)
socket(0x2, 0x1, 0x106) (async)
setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) (async)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55)
executing program 2:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="21012dbd7000fb00df25050000000800040010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40084)
epoll_create$auto(0x4)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mq_notify$auto(0x6f7, 0x0)
executing program 3:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r5=>0x0})
socket(0x1, 0x4, 0x1)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-socket-bpf$auto-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r5=>0x0})
socket(0x1, 0x4, 0x1)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
single: successfully extracted reproducer
found reproducer with 40 syscalls
minimizing guilty program
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-socket-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r5=>0x0})
socket(0x1, 0x4, 0x1)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-socket
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00'})
socket(0x1, 0x4, 0x1)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r5=>0x0})
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'})
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-ioctl$sock_SIOCGIFINDEX-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'})
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_netdev-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-syz_genetlink_get_family_id$auto_macsec-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-socket-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6) (async)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-prctl$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-mmap$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-dup2$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-dup2$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
dup2$auto(0x0, 0x3) (async)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-mmap$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-mmap$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-mmap$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-connect$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-syz_open_procfs$namespace-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-socket$nl_generic-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket(0xa, 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(0x0, r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, 0x0, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, 0x0, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, 0x0, 0x7)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
extracting C reproducer
testing compiled C program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=8m43.222357051s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, 0x0, 0x7)

program did not crash
testing program (duration=8m43.222357051s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-sendmsg$auto_NFSD_CMD_THREADS_SET-socket-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NFSD_CMD_THREADS_SET-sendmsg$auto_NFSD_CMD_THREADS_SET-socket$nl_generic-connect$auto-listen$auto-prctl$auto-mmap$auto-madvise$auto-mmap$auto-prctl$auto-utimensat$auto-socket$nl_generic-socket-syz_genetlink_get_family_id$auto_macsec-sendmsg$auto_MACSEC_CMD_ADD_RXSC-socket$nl_generic-socket$nl_generic-bpf$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011)
socket(0xa, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x5, 0x0, 0x7)

program did not crash
reproducing took 7h27m9.601038079s
repro crashed as (corrupted=false):
svc: failed to register nfsdv3 RPC service (errno 111).
svc: failed to register nfsaclv3 RPC service (errno 512).
==================================================================
BUG: KASAN: slab-use-after-free in shrinker_free+0x3b7/0x430 mm/shrinker.c:775
Read of size 4 at addr ffff88814b0d871c by task syz.0.347/8212

CPU: 1 UID: 0 PID: 8212 Comm: syz.0.347 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:377 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:488
 kasan_report+0xd9/0x110 mm/kasan/report.c:601
 shrinker_free+0x3b7/0x430 mm/shrinker.c:775
 nfsd_file_cache_shutdown+0xbc/0x4e0 fs/nfsd/filecache.c:923
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:314 [inline]
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:308 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:429 [inline]
 nfsd_svc+0x6a9/0x940 fs/nfsd/nfssvc.c:820
 nfsd_nl_threads_set_doit+0x535/0xbe0 fs/nfsd/nfsctl.c:1722
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:729 [inline]
 __sock_sendmsg net/socket.c:744 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2602
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2656
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2685
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4db8f7dff9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4db89ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f4db9136058 RCX: 00007f4db8f7dff9
RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000005
RBP: 00007f4db8ff0296 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f4db9136058 R15: 00007ffd0839ade8
 </TASK>

Allocated by task 8206:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:878 [inline]
 kzalloc_noprof include/linux/slab.h:1014 [inline]
 shrinker_alloc+0xf8/0xb00 mm/shrinker.c:683
 nfsd_file_cache_init+0x1cb/0x4d0 fs/nfsd/filecache.c:775
 nfsd_startup_generic fs/nfsd/nfssvc.c:292 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:387 [inline]
 nfsd_svc+0x5db/0x940 fs/nfsd/nfssvc.c:820
 nfsd_nl_threads_set_doit+0x535/0xbe0 fs/nfsd/nfsctl.c:1722
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:729 [inline]
 __sock_sendmsg net/socket.c:744 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2602
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2656
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2685
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 0:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:579
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:230 [inline]
 slab_free_hook mm/slub.c:2343 [inline]
 slab_free mm/slub.c:4580 [inline]
 kfree+0x14f/0x4b0 mm/slub.c:4728
 rcu_do_batch kernel/rcu/tree.c:2567 [inline]
 rcu_core+0x79d/0x14d0 kernel/rcu/tree.c:2823
 handle_softirqs+0x213/0x8f0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1037
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541
 __call_rcu_common.constprop.0+0x99/0x7a0 kernel/rcu/tree.c:3086
 shrinker_free+0xfe/0x430 mm/shrinker.c:807
 nfsd_file_cache_shutdown+0xbc/0x4e0 fs/nfsd/filecache.c:923
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:314 [inline]
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:308 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:429 [inline]
 nfsd_svc+0x6a9/0x940 fs/nfsd/nfssvc.c:820
 nfsd_nl_threads_set_doit+0x535/0xbe0 fs/nfsd/nfsctl.c:1722
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:729 [inline]
 __sock_sendmsg net/socket.c:744 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2602
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2656
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2685
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88814b0d8700
 which belongs to the cache kmalloc-192 of size 192
The buggy address is located 28 bytes inside of
 freed 192-byte region [ffff88814b0d8700, ffff88814b0d87c0)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814b0d8e00 pfn:0x14b0d8
flags: 0x57ff00000000200(workingset|node=1|zone=2|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 057ff00000000200 ffff88801ac413c0 ffffea000514c650 ffffea000514c350
raw: ffff88814b0d8e00 000000000010000c 00000001f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 12267670163, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1537
 prep_new_page mm/page_alloc.c:1545 [inline]
 get_page_from_freelist+0x101e/0x3070 mm/page_alloc.c:3457
 __alloc_pages_noprof+0x223/0x25c0 mm/page_alloc.c:4733
 alloc_pages_mpol_noprof+0x275/0x610 mm/mempolicy.c:2265
 alloc_slab_page mm/slub.c:2413 [inline]
 allocate_slab mm/slub.c:2579 [inline]
 new_slab+0x28b/0x3f0 mm/slub.c:2632
 ___slab_alloc+0xc15/0x1500 mm/slub.c:3819
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3909
 __slab_alloc_node mm/slub.c:3962 [inline]
 slab_alloc_node mm/slub.c:4123 [inline]
 __do_kmalloc_node mm/slub.c:4264 [inline]
 __kmalloc_node_track_caller_noprof+0x365/0x440 mm/slub.c:4284
 __do_krealloc mm/slab_common.c:1219 [inline]
 krealloc_noprof+0x5d/0x130 mm/slab_common.c:1268
 add_sysfs_param+0xcb/0x930 kernel/params.c:654
 kernel_add_sysfs_param kernel/params.c:817 [inline]
 param_sysfs_builtin kernel/params.c:856 [inline]
 param_sysfs_builtin_init+0x253/0x3c0 kernel/params.c:990
 do_one_initcall+0x128/0x630 init/main.c:1269
 do_initcall_level init/main.c:1331 [inline]
 do_initcalls init/main.c:1347 [inline]
 do_basic_setup init/main.c:1366 [inline]
 kernel_init_freeable+0x660/0xc50 init/main.c:1580
 kernel_init+0x1c/0x2b0 init/main.c:1469
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88814b0d8600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff88814b0d8680: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc
>ffff88814b0d8700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88814b0d8780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
 ffff88814b0d8800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================

final repro crashed as (corrupted=false):
svc: failed to register nfsdv3 RPC service (errno 111).
svc: failed to register nfsaclv3 RPC service (errno 512).
==================================================================
BUG: KASAN: slab-use-after-free in shrinker_free+0x3b7/0x430 mm/shrinker.c:775
Read of size 4 at addr ffff88814b0d871c by task syz.0.347/8212

CPU: 1 UID: 0 PID: 8212 Comm: syz.0.347 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:377 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:488
 kasan_report+0xd9/0x110 mm/kasan/report.c:601
 shrinker_free+0x3b7/0x430 mm/shrinker.c:775
 nfsd_file_cache_shutdown+0xbc/0x4e0 fs/nfsd/filecache.c:923
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:314 [inline]
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:308 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:429 [inline]
 nfsd_svc+0x6a9/0x940 fs/nfsd/nfssvc.c:820
 nfsd_nl_threads_set_doit+0x535/0xbe0 fs/nfsd/nfsctl.c:1722
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:729 [inline]
 __sock_sendmsg net/socket.c:744 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2602
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2656
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2685
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4db8f7dff9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4db89ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f4db9136058 RCX: 00007f4db8f7dff9
RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000005
RBP: 00007f4db8ff0296 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f4db9136058 R15: 00007ffd0839ade8
 </TASK>

Allocated by task 8206:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:878 [inline]
 kzalloc_noprof include/linux/slab.h:1014 [inline]
 shrinker_alloc+0xf8/0xb00 mm/shrinker.c:683
 nfsd_file_cache_init+0x1cb/0x4d0 fs/nfsd/filecache.c:775
 nfsd_startup_generic fs/nfsd/nfssvc.c:292 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:387 [inline]
 nfsd_svc+0x5db/0x940 fs/nfsd/nfssvc.c:820
 nfsd_nl_threads_set_doit+0x535/0xbe0 fs/nfsd/nfsctl.c:1722
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:729 [inline]
 __sock_sendmsg net/socket.c:744 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2602
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2656
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2685
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 0:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:579
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:230 [inline]
 slab_free_hook mm/slub.c:2343 [inline]
 slab_free mm/slub.c:4580 [inline]
 kfree+0x14f/0x4b0 mm/slub.c:4728
 rcu_do_batch kernel/rcu/tree.c:2567 [inline]
 rcu_core+0x79d/0x14d0 kernel/rcu/tree.c:2823
 handle_softirqs+0x213/0x8f0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1037
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541
 __call_rcu_common.constprop.0+0x99/0x7a0 kernel/rcu/tree.c:3086
 shrinker_free+0xfe/0x430 mm/shrinker.c:807
 nfsd_file_cache_shutdown+0xbc/0x4e0 fs/nfsd/filecache.c:923
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:314 [inline]
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:308 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:429 [inline]
 nfsd_svc+0x6a9/0x940 fs/nfsd/nfssvc.c:820
 nfsd_nl_threads_set_doit+0x535/0xbe0 fs/nfsd/nfsctl.c:1722
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:729 [inline]
 __sock_sendmsg net/socket.c:744 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2602
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2656
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2685
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88814b0d8700
 which belongs to the cache kmalloc-192 of size 192
The buggy address is located 28 bytes inside of
 freed 192-byte region [ffff88814b0d8700, ffff88814b0d87c0)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814b0d8e00 pfn:0x14b0d8
flags: 0x57ff00000000200(workingset|node=1|zone=2|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 057ff00000000200 ffff88801ac413c0 ffffea000514c650 ffffea000514c350
raw: ffff88814b0d8e00 000000000010000c 00000001f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 12267670163, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1537
 prep_new_page mm/page_alloc.c:1545 [inline]
 get_page_from_freelist+0x101e/0x3070 mm/page_alloc.c:3457
 __alloc_pages_noprof+0x223/0x25c0 mm/page_alloc.c:4733
 alloc_pages_mpol_noprof+0x275/0x610 mm/mempolicy.c:2265
 alloc_slab_page mm/slub.c:2413 [inline]
 allocate_slab mm/slub.c:2579 [inline]
 new_slab+0x28b/0x3f0 mm/slub.c:2632
 ___slab_alloc+0xc15/0x1500 mm/slub.c:3819
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3909
 __slab_alloc_node mm/slub.c:3962 [inline]
 slab_alloc_node mm/slub.c:4123 [inline]
 __do_kmalloc_node mm/slub.c:4264 [inline]
 __kmalloc_node_track_caller_noprof+0x365/0x440 mm/slub.c:4284
 __do_krealloc mm/slab_common.c:1219 [inline]
 krealloc_noprof+0x5d/0x130 mm/slab_common.c:1268
 add_sysfs_param+0xcb/0x930 kernel/params.c:654
 kernel_add_sysfs_param kernel/params.c:817 [inline]
 param_sysfs_builtin kernel/params.c:856 [inline]
 param_sysfs_builtin_init+0x253/0x3c0 kernel/params.c:990
 do_one_initcall+0x128/0x630 init/main.c:1269
 do_initcall_level init/main.c:1331 [inline]
 do_initcalls init/main.c:1347 [inline]
 do_basic_setup init/main.c:1366 [inline]
 kernel_init_freeable+0x660/0xc50 init/main.c:1580
 kernel_init+0x1c/0x2b0 init/main.c:1469
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88814b0d8600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff88814b0d8680: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc
>ffff88814b0d8700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88814b0d8780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
 ffff88814b0d8800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================