Extracting prog: 28.330205636s
Minimizing prog: 18m29.698914594s
Simplifying prog options: 0s
Extracting C: 25.315613941s
Simplifying C: 6m4.571184019s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-ioctl$sock_netrom_SIOCADDRT-ioctl$sock_netrom_SIOCADDRT-setsockopt$ax25_SO_BINDTODEVICE-syz_init_net_socket$x25-ioctl$sock_ifreq-sendto$packet
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r3=>0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r7, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r11 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r11, 0x101, 0x6, &(0x7f0000000100), 0x4)
r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a00010000020a0108000000000000000000000002d40006004eceaa5107ff947f315af9e45aeebe5a244d6e27fa7f053cea845e26903203b411c0a7f7d75888d9d345df0ba58de48de3b3e7bd13d8937b36f76fb75871284802487326217e2c3722eef0f742ec5e27df2f9d2d26dbe45abf55ecec9252682639c47e20470e44f39159694dafa94c74aaa7a8be9f0ef03e6f2930f880aaded77e42bfa37758f1ca52547958d57de2d3ed5e04e46af162b56a96e46503a095cec1de437d65bd50860dac39cad751424d25b828a64e0c9944d4b680c5d1fd05442684fadabd6bdb42635ba1e451fcd87a0c00044000000000000000050900010073797a310000000048000000000a01020000000000000000059e000908000240000000010c00044000000000000000030900010073797a31000000000c00044000000000000000020800024000000002140000001100010000000000000000000a00200a"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r12, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r11, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r13, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
sendto$packet(r1, &(0x7f0000002280)="0b031200e0ff64000200475400f6a13bb1000000086086dd48035c2d9575a74112f06490c9d8e3e66c275a8e365374c046469de71cc9e93e123a4d284695a0139dc9c35311baede8b72350f96bf7766a97126e4c2bacc3faeaed6633a549b83b4fc3438e8cff8e3947", 0x69, 0x0, &(0x7f0000000140)={0x11, 0x66aff59f0b39f99d, r3, 0x1, 0x4, 0x6, @broadcast}, 0x3)

program crashed: KASAN: slab-use-after-free Read in ax25_release
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-ioctl$sock_netrom_SIOCADDRT-ioctl$sock_netrom_SIOCADDRT-setsockopt$ax25_SO_BINDTODEVICE-syz_init_net_socket$x25-ioctl$sock_ifreq
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r10, 0x101, 0x6, &(0x7f0000000100), 0x4)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)
r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r12, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

program crashed: KASAN: slab-use-after-free Read in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-ioctl$sock_netrom_SIOCADDRT-ioctl$sock_netrom_SIOCADDRT-setsockopt$ax25_SO_BINDTODEVICE-syz_init_net_socket$x25
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r10, 0x101, 0x6, &(0x7f0000000100), 0x4)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-ioctl$sock_netrom_SIOCADDRT-ioctl$sock_netrom_SIOCADDRT-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r10, 0x101, 0x6, &(0x7f0000000100), 0x4)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-ioctl$sock_netrom_SIOCADDRT-ioctl$sock_netrom_SIOCADDRT
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r10, 0x101, 0x6, &(0x7f0000000100), 0x4)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]})

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-ioctl$sock_netrom_SIOCADDRT-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r9)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r10, 0x101, 0x6, &(0x7f0000000100), 0x4)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r8)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r9, 0x101, 0x6, &(0x7f0000000100), 0x4)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-setsockopt$ax25_SO_BINDTODEVICE-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r8)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r9, 0x101, 0x6, &(0x7f0000000100), 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-sendmsg$NFT_BATCH-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r2=>r0}, './bus\x00'})
fanotify_mark(r2, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r6, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r8)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r9, 0x101, 0x6, &(0x7f0000000100), 0x4)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000024c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x12c8038}, 0xc, &(0x7f0000002480)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r8, 0x101, 0x6, &(0x7f0000000100), 0x4)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-setsockopt$ax25_int-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r8, 0x101, 0x6, &(0x7f0000000100), 0x4)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-keyctl$link-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r6)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-add_key$keyring-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-syz_init_net_socket$netrom-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-read$FUSE-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_GET_DEVICE-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r5, 0x327, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-syz_genetlink_get_family_id$wireguard-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_generic-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socket$inet_udp-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-ioctl$sock_SIOCGIFINDEX-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-fanotify_mark-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
fanotify_mark(r1, 0x1, 0x8001800, 0xffffffffffffff9c, &(0x7f0000002340)='./bus\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-ioctl$AUTOFS_DEV_IOCTL_VERSION-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002300)={{0x1, 0x1, 0x18, r0}, './bus\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-setsockopt$packet_int-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000002380)=0x9, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socket$packet-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socket$packet-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program crashed: WARNING: refcount bug in ax25_release
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000002500)=@bpq0, 0x10)

program did not crash
testing program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=35.065367724s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
simplifying C reproducer
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program did not crash
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program did not crash
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program did not crash
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
testing compiled C program (duration=35.065367724s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$ax25-syz_init_net_socket$bt_sco-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-setsockopt$ax25_SO_BINDTODEVICE
program crashed: WARNING: refcount bug in ax25_release
reproducing took 25m27.91594105s
repro crashed as (corrupted=false):
------------[ cut here ]------------
refcount_t: decrement hit 0; leaking memory.
WARNING: CPU: 1 PID: 5932 at lib/refcount.c:31 refcount_warn_saturate+0x1ed/0x210 lib/refcount.c:31
Modules linked in:
CPU: 1 UID: 0 PID: 5932 Comm: syz-executor424 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:refcount_warn_saturate+0x1ed/0x210 lib/refcount.c:31
Code: 8b e8 37 3b ba fc 90 0f 0b 90 90 e9 c3 fe ff ff e8 a8 01 fa fc c6 05 27 d1 a7 0b 01 90 48 c7 c7 40 9b d1 8b e8 14 3b ba fc 90 <0f> 0b 90 90 e9 a0 fe ff ff 48 89 ef e8 42 ae 5c fd e9 44 fe ff ff
RSP: 0018:ffffc9000395fb18 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a5139
RDX: ffff888021a52440 RSI: ffffffff815a5146 RDI: 0000000000000001
RBP: ffff888033cbe64c R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000002 R12: 1ffff9200072bf68
R13: ffff888033cbe64c R14: 0000000000000000 R15: ffff888033cbe000
FS:  0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa2f14a43c0 CR3: 000000000df7e000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __refcount_dec include/linux/refcount.h:336 [inline]
 refcount_dec include/linux/refcount.h:351 [inline]
 ref_tracker_free+0x710/0x820 lib/ref_tracker.c:236
 netdev_tracker_free include/linux/netdevice.h:4156 [inline]
 netdev_put include/linux/netdevice.h:4173 [inline]
 netdev_put include/linux/netdevice.h:4169 [inline]
 ax25_release+0x33f/0xa10 net/ax25/af_ax25.c:1069
 __sock_release+0xb0/0x270 net/socket.c:640
 sock_close+0x1c/0x30 net/socket.c:1408
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1096
 x64_sys_call+0x151f/0x1720 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa2f1423fa9
Code: Unable to access opcode bytes at 0x7fa2f1423f7f.
RSP: 002b:00007ffd9ec27ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fa2f1423fa9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007fa2f14a4390 R08: ffffffffffffffb8 R09: 0000000000000001
R10: 0000000020002500 R11: 0000000000000246 R12: 00007fa2f14a4390
R13: 0000000000000000 R14: 00007fa2f14a6ec0 R15: 00007fa2f13f45f0
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
refcount_t: decrement hit 0; leaking memory.
WARNING: CPU: 1 PID: 5932 at lib/refcount.c:31 refcount_warn_saturate+0x1ed/0x210 lib/refcount.c:31
Modules linked in:
CPU: 1 UID: 0 PID: 5932 Comm: syz-executor424 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:refcount_warn_saturate+0x1ed/0x210 lib/refcount.c:31
Code: 8b e8 37 3b ba fc 90 0f 0b 90 90 e9 c3 fe ff ff e8 a8 01 fa fc c6 05 27 d1 a7 0b 01 90 48 c7 c7 40 9b d1 8b e8 14 3b ba fc 90 <0f> 0b 90 90 e9 a0 fe ff ff 48 89 ef e8 42 ae 5c fd e9 44 fe ff ff
RSP: 0018:ffffc9000395fb18 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a5139
RDX: ffff888021a52440 RSI: ffffffff815a5146 RDI: 0000000000000001
RBP: ffff888033cbe64c R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000002 R12: 1ffff9200072bf68
R13: ffff888033cbe64c R14: 0000000000000000 R15: ffff888033cbe000
FS:  0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa2f14a43c0 CR3: 000000000df7e000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __refcount_dec include/linux/refcount.h:336 [inline]
 refcount_dec include/linux/refcount.h:351 [inline]
 ref_tracker_free+0x710/0x820 lib/ref_tracker.c:236
 netdev_tracker_free include/linux/netdevice.h:4156 [inline]
 netdev_put include/linux/netdevice.h:4173 [inline]
 netdev_put include/linux/netdevice.h:4169 [inline]
 ax25_release+0x33f/0xa10 net/ax25/af_ax25.c:1069
 __sock_release+0xb0/0x270 net/socket.c:640
 sock_close+0x1c/0x30 net/socket.c:1408
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xad8/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1096
 x64_sys_call+0x151f/0x1720 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa2f1423fa9
Code: Unable to access opcode bytes at 0x7fa2f1423f7f.
RSP: 002b:00007ffd9ec27ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fa2f1423fa9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007fa2f14a4390 R08: ffffffffffffffb8 R09: 0000000000000001
R10: 0000000020002500 R11: 0000000000000246 R12: 00007fa2f14a4390
R13: 0000000000000000 R14: 00007fa2f14a6ec0 R15: 00007fa2f13f45f0
 </TASK>