Extracting prog: 10m47.424863266s
Minimizing prog: 2h8m9.165210793s
Simplifying prog options: 7m47.411064072s
Extracting C: 5m14.469934747s
Simplifying C: 0s


24 programs, timeouts [30s 1m40s 6m0s]
extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
adjtimex$auto(0x2) (async)
fork$auto() (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30, 3, 8, 30, 14, 6, 30, 8, 29, 10, 10, 23, 6, 13, 8, 17, 22, 25, 5, 14, 22, 16, 17]
detailed listing:
executing program 1:
madvise$auto(0x0, 0x2000040080000004, 0xe)
syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000000c0), 0xffffffffffffffff)
madvise$auto(0x0, 0x80000001, 0x8)
r0 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0000, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_INTERFACE320(r0, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000001140)={0xec, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_COORDINATOR={0x51, 0x1e, "8ff4ec3522cddb723bb7e9113a74617d522a6b09cddd3a781a7d051b51216b5bfcca2884b387edf0dd37adb9dc0085aad5435d76c8a7a2fa25e3866ab0cd0db204e4158d42f6552a86228fd25e"}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xc15a}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x52}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x101}, @NL802154_ATTR_COORDINATOR={0x36, 0x1e, "4575e877b29a76ecbe0c61d9f5da996858d67faeef60ae2666c613e44823976904421e3843206fddb96353ec45b67d36cff9"}, @NL802154_ATTR_SCAN_MEAN_PRF={0x2d, 0x23, "abdd9ac360254095de6af7e074c48517ab45eb37db4182fb0341805253dcaa4b9c9ec97ad462507543"}, @NL802154_ATTR_WPAN_PHY_CAPS={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
madvise$auto(0x1ffff000, 0x5510, 0x8)
ioctl$auto(0xc8, 0x4000400454cd, 0x1)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000)
clone$auto(0x8000000000000000, 0x104, 0x200, 0x1, 0x100000000)
madvise$auto(0x0, 0x3, 0x15)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_HARDIF5(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x37a4e07e36bca730}, 0x4810)
socket(0x15, 0x2, 0x2)
ioperm$auto(0x40003, 0x8, 0x149)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x27f1)
connect$auto(0x3, 0x4, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
keyctl$auto(0x1e, 0x8001, 0x40000000001065, 0x1, 0x1)
r0 = socket(0x1e, 0x5, 0xd7)
fcntl$auto(0x4, 0x4, 0xa553)
mmap$auto(0x4, 0x6, 0x0, 0xffffffffffffffff, 0xffff, 0x8)
mmap$auto(0xfffffffffffffffd, 0xa, 0xdf, 0x9b72, 0x6, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x4)
epoll_pwait2$auto(0x1, 0x6ba55e92, 0x3, 0x8, 0x5, 0x6)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x7, 0x5)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSC151(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf250200000008000100", @ANYRESHEX=r1, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8006}, 0x8d0)
prctl$auto(0x1000000000000081, 0x7, 0xfb, 0x9, 0x15a7)
epoll_wait$auto(0x2, 0x0, 0x800, 0x2)
ioperm$auto(0x7, 0x6, 0x4000000000002)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
semctl$auto(0x4, 0x1, 0x14, 0x1)
fanotify_init$auto(0x5, 0x9)
epoll_pwait2$auto(0xd, 0x100000274, 0x65800, 0x7, 0xffffffffffffffff, 0x7)
clone$auto(0x10051c, 0x10000000000006, 0x1, 0x5, 0x6)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x600000000, 0x6, 0x7, 0x11, 0x2, 0x1ff)
write$auto(0x1, 0x2, 0x400102)
executing program 1:
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = socket(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'})
io_setup$auto(0x10, 0x20000001)
socket(0x2, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x1b72, 0xbe7, 0x4)
setsockopt$auto(0x3, 0x0, 0x4, 0xe33, 0x3)
fchownat$auto(0x7, 0x2, 0x7, 0xfffffffffffffffb, 0x8)
executing program 1:
ioperm$auto(0x2, 0x3, 0x0)
close_range$auto(0x7, 0xfffffffffffffff8, 0x2) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async)
sendmsg$auto_MACSEC_CMD_ADD_TXSA149(r0, 0x0, 0x4000)
pivot_root$auto(0x7, 0x6)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x5, 0x0)
fstatfs$auto(0x3, 0x8)
getsockopt$auto(0x6, 0x40000000084, 0x72, 0x80009, 0x6) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
mincore$auto(0x0, 0x8000000000005b, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
socket(0x1, 0x2, 0x0) (async)
fstat$auto(0x100000000, 0x7) (async)
socket(0x5, 0x800, 0xe7c7) (async)
semop$auto(0x1, 0x2, 0x40000) (async)
socket(0x11, 0x3, 0x2) (async)
getsockopt$auto(0x6, 0x107, 0x7, 0x401, 0xa) (async)
ioctl$auto(0x1, 0x890b, 0x8) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
open(&(0x7f0000000800)='./file0\x00', 0xaf44529eb48add62, 0x154)
executing program 1:
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getrlimit$auto(0x2, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xa, 0xe, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xf, 0x6, 0x2) (async)
socket(0x1d, 0x2, 0x7) (async)
getsockopt$auto(0x6, 0x6b, 0x29, 0x401, 0xa)
socket(0x2, 0x1, 0x0) (async)
socket(0x1e, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
cachestat$auto(0x3, 0x5, 0x4, 0x1000007)
executing program 0:
execve$auto(0xe673, 0x2, 0x1f7f)
execve$auto(0x7, 0x3, 0x401)
r0 = socket(0x1e, 0x6, 0x2)
syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000040), r0)
fadvise64$auto(0x9, 0x1, 0x8, 0xfff)
listen$auto(0x3, 0x85)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x2000040080000004, 0xe)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x0, 0x7ffe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x6, 0x5, 0x9)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0xfffffffffffffffa, 0x0, 0x1a, 0x480c, 0x4000800000)
msgctl$auto(0x81, 0x3, 0x3)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET59(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xffffffffffffff99, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0ab616dd", @ANYRESOCT=r0, @ANYBLOB="000227bd7000fddbdf250f000000070001007ff1a700"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
mincore$auto(0x0, 0x8000000000005b, 0x2)
fcntl$auto(0x1, 0x26, 0x2)
r2 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000080), r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
socket(0xa, 0x2, 0x0)
getsockopt$auto(0x3, 0x100000000000000, 0x2, 0x1000000000000, 0x2)
keyctl$auto(0x11, 0x1000000004, 0x0, 0x5, 0x8003)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00')
mprotect$auto(0xd675, 0x80000000, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x3, 0xb89, 0x3ffffffbffffa)
fanotify_init$auto(0x40, 0xffffffffffffffff)
personality$auto(0x40004010410ffc)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
personality$auto(0x8)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000780), 0xffffffffffffffff)
clone$auto(0x7, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x6, 0x1)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0)
sendmsg$auto_ETHTOOL_MSG_EEE_SET33(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200440c4)
clone$auto(0x2, 0x0, 0xc1b0, 0x7, 0xfffffffffffffffb)
ioprio_get$auto(0x2000000002, 0x0)
sendmsg$auto_OVS_METER_CMD_SET393(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1, r1, 0x300, 0x803, 0x25dfdbfc, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000808}, 0x4008810)
executing program 0:
socket(0x10, 0x3, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x7, 0xfffffffffffffdf8)
iopl$auto(0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
socket(0x15, 0x5, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
timerfd_gettime$auto(0x4, 0x2)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
socket(0xa, 0x6, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x8, 0x4, 0x20000000002, 0x5, 0x3)
lsetxattr$auto(0x2, 0x5, 0x406, 0x102fff, 0x200000000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
io_uring_setup$auto(0x40000002c55, 0x10)
mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
futimesat$auto(0xc00, 0x2, 0x9)
utimensat$auto(0x84, 0x8, 0x0, 0x9)
sendmsg$auto_NBD_CMD_CONNECT158(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000004217b6760278e350474029cdfd24fb6acaa8785bf3e62ce856d0e889c7a8e219e38829a20e430848e983c01259e85c9f5f26dce98e69debf1a93a27f5f0376bafaa876d905381e8abdab4b9e47428bcee388d03e5e1c89e80cc247abac65cd7ed9d42fc07d3e89241f1bd7f760553e7455b6e706244efcd75e9822539d69c51d5733c9d4a1dd080a35393c6a984085869e56988b4a96c27332b7ab6da6c4d4000000000000000000", @ANYRESOCT=r0, @ANYBLOB="010a2dbd7000fedbdf25010000000d000700c7f29d719c9c043cc6000000c957ab44059d5d35d8c803e9a7dd8f27e8330a27b2343d490179b22546626dcbf2f35e5090d9292adefbc86d3589f0e2741d81ccae1e74623c9c4bfddb2dee1289e6057ccf8f77245b60f3c86aaceb7c8fc3f1eccb7092a33355a9b62aef0b97d9a74e052e739db52f5954583cd190965f72287bf7001c008b"], 0x24}, 0x1, 0x0, 0x0, 0xc084}, 0x4000080)
llistxattr$auto(0x2, 0xe3, 0x5)
socket(0x2, 0x3, 0x1)
fsmount$auto(0x6f39b0be, 0xfffffffffffffffc, 0xcb)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 0:
bpf$auto(0xc, 0xc0000000000, 0x0)
mmap$auto(0x0, 0x80000000000b9e, 0x8000000000200001, 0x13, 0x9, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x27f1)
shutdown$auto(0x5, 0x2)
write$auto(0x5, 0x800, 0x80000001)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
move_pages$auto(0x1, 0x2000000000003, 0xff, 0x0, 0x1, 0x8000000000000000)
ioctl$auto(0xc8, 0x400454d1, 0x5c8d)
executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
socket(0x2, 0x1, 0x106) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP456(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x0, 0x305, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x800)
fstatfs$auto(0x3, 0x8)
recvmmsg$auto(0x5, 0x4, 0x7fffff80, 0x1560, 0x7) (async)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
setrlimit$auto(0x1000000007, 0x1) (async, rerun: 32)
socket(0xa, 0x801, 0x84)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
io_uring_setup$auto(0x3ff, 0x3)
io_uring_setup$auto(0x7, 0x0)
setresuid$auto(0x8, 0x100000001, 0x401)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
io_uring_setup$auto(0x3ff, 0x3)
mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
write$auto(0x5, 0x800, 0x80000001)
mmap$auto(0x56, 0x6, 0x7, 0x12, 0x6, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x6, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
getsockopt$auto(0x8, 0x29, 0xb, 0x7, 0x6)
mmap$auto(0x0, 0x8780, 0xfd51, 0x91, 0x6, 0x1)
clock_nanosleep$auto(0xfffffffffffffffa, 0x4, 0x0, 0x3)
executing program 2:
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xf000, 0xb, 0x1000000003, 0x9b72, 0x7, 0x7ff)
socket(0x1a, 0x1, 0x0)
dup2$auto(0x0, 0x83)
getrandom$auto(0x0, 0x5, 0x2)
clone$auto(0x81000005, 0x6, 0x8000, 0x40000000000006, 0x80000001)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO79(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x4a2e9e39, 0x2, 0x8000)
ioctl$auto(0x3, 0x89e2, 0x91)
ioctl$auto(0x3, 0x89e2, 0x91)
r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000002fc0), 0xffffffffffffffff)
setreuid$auto(0x3, 0x7)
kill$auto(0x1, 0x12)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmsg$auto_TCP_METRICS_CMD_GET427(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2000880)
executing program 3:
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
keyctl$auto(0x10, 0xffffffffffffffff, 0x5, 0x5, 0x80000003)
socket(0x2b, 0x1, 0x1)
io_uring_register$auto(0x7ff, 0x80000000, 0x1, 0x2)
listen$auto(0x3, 0x81)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
mbind$auto(0x1ffff000, 0x6, 0x1, 0x0, 0x7ffb, 0x2)
mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2)
executing program 2:
socket(0x10, 0x3, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x29, 0x5, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x409b72, 0x2, 0x8000) (async)
socket(0x1, 0x1, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
socket(0x18, 0x5, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x0, 0x1, 0x1c, 0x7, 0xfa) (async)
socket$nl_generic(0x10, 0x3, 0x10)
get_robust_list$auto(0x100000000, 0x2, 0x7f) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
getsockopt$auto(0x100000006, 0x88, 0x1, 0x9, 0x0) (async)
socket(0x2, 0x1, 0x0) (async)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x2009b72, 0x2, 0x8000)
setsockopt$auto(0x6, 0x8000000000000006, 0x11, 0x4808, 0x7ffffc)
executing program 0:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x81000005, 0x6, 0x8000, 0x40000000000006, 0x80000001)
mmap$auto(0x5, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
getdents$auto(0x3e4, 0x0, 0x7ee)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
fork$auto()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fork$auto()
mmap$auto(0xf, 0x5, 0xb, 0x17, 0xfffffffffffff566, 0x2)
fsconfig$auto(0x6, 0x5, 0x200, 0x4, 0x5)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0x3, 0x15)
bpf$auto(0x8000000000000012, 0x2000000009, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x4, 0x8, 0x1)
madvise$auto(0x0, 0x3, 0x15)
sendmsg$auto_NETDEV_CMD_DEV_GET168(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd700030dbdf25010000000800010021c9"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getresuid$auto(0x9, 0x5, 0x1004)
executing program 3:
ioperm$auto(0x7, 0x6, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START260(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x21, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2004c050)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_FEC_SET37(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x44)
socket(0x1d, 0x2, 0x7)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
fstatfs$auto(0x3, 0x8)
set_mempolicy$auto(0x6, 0x9, 0xf)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mlockall$auto(0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000c40), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$auto_NL802154_CMD_SET_CCA_MODE342(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdc02, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xed67adf7c888a399}, 0xc0)
sendmsg$auto_MACSEC_CMD_ADD_TXSA149(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}, @MACSEC_ATTR_SA_CONFIG={0x44, 0x3, "0286a18049015cb65b136b91f2b0af005c6c9724d3794960aca09624c9f5bc7a69185d03d40c0011af6bd5d1dbbc513806c956708c8e36e036b5b4255011dc35"}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_SA_CONFIG={0x15, 0x3, "823f86df858749207e71be067b796acfcb"}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40891}, 0x40400c9)
timerfd_create$auto(0x9, 0x0)
ioctl$auto(0x3, 0x40085400, 0xfffffffffffff4e0)
socket(0x15, 0x801, 0x10)
setsockopt$auto(0x3, 0x0, 0x18, 0xe33, 0x0)
io_getevents$auto(0x3ff, 0x607, 0x8, 0xa871a38, 0x6b)
setregid$auto(0x9, 0x7fffffffffffffff)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
waitid$auto(0x9, 0x1, 0xffb, 0x8, 0x1000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_CGROUPSTATS_CMD_GET19(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800)
executing program 0:
r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_VPORT_CMD_SET398(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '\xab\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x68094)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000006c0), 0xffffffffffffffff)
clock_getres$auto(0xfffffffffffffffc, 0x1) (async)
clock_getres$auto(0xfffffffffffffffc, 0x1)
io_uring_setup$auto(0x5, 0x3)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) (async)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1)
sendmsg$auto_NL802154_CMD_SET_CHANNEL343(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc141}, 0x20000000) (async)
sendmsg$auto_NL802154_CMD_SET_CHANNEL343(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc141}, 0x20000000)
sendmsg$auto_OVS_VPORT_CMD_SET398(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x50, 0x5, "b7e6b88d3818b63b21eb723e1fb00ab1c222b7b3da8f9ae339535dc6d7ad362e9b1fd5bd4f6fa936148c22cbebe0d77197b03fddca498ecda4c14828c048e1e73446cac44fd0c1c3e86fb0b5"}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x4080)
sendmsg$auto_NBD_CMD_CONNECT158(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70b92a, 0x25dffbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x23}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000800)
executing program 3:
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x7, 0x28000)
sendmsg$auto_NL80211_CMD_ASSOCIATE208(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xffffffffffffffc6, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket(0x2, 0x1, 0x106) (async)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0xa, 0x1680000) (async)
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL12(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040090) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r1 = socket(0xa, 0x3, 0x73)
sendmsg$auto_NL80211_CMD_SET_WOWLAN299(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0xffd8) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x2000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async)
clone$auto(0x8000000000000000, 0x4, 0x200, 0x1, 0x3)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) (async)
mmap$auto(0x8, 0x57, 0x1bc, 0x14, 0x4, 0x62e8)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA230(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x138, r2, 0x403, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REKEY_DATA={0xdc, 0x7a, "82e8f59c9d7d95c942dceb8b8a6790aca1baabc4a9336b5f474e2ca58cb1506724f523790f46d8aa382722fd5fb01e671b49aa4cc7313433771d6774a72313832d371945be7621a960db40cad8ddad2b6d3837d2dc5d1b88a5115ffdea281829e14e4284ec34572845a46e93dcd3cd926f53c651e0ead2c63b754959932362bca26df3d0dd797fa129114e3e21576aed155818adc12751ce0b3c6832905bb0ffe0f2912e0857b9fd63062c30c44775ff7611814b5c9cbcf352f006ab05b7fef86d64c48b835da4403763c81f3cd84bec27f75500dbcc8d47"}, @NL80211_ATTR_MLO_TTLM_DLINK={0x24, 0x148, "6d0bd09687fba3ae643af22a60109039b03de2270c7ce0fdbdea37b3a7276ecf"}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xffff7fff}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x24040800) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
pipe2$auto(0x8, 0x1) (async)
open(&(0x7f0000000000)='./file0/file0\x00', 0x400, 0x1ea) (async)
execveat$auto(0x0, 0x2, 0x7, 0xe3a, 0x1000)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
adjtimex$auto(0x2) (async)
fork$auto() (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
getsockopt$auto(0x6, 0x29, 0xffffffff, 0x2009, 0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0x3, 0x1c83d47d, 0x8, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
socket(0x2, 0x1, 0x106)
bind$auto(0x3, 0xff, 0x7f)
close_range$auto(0x2, 0x8000, 0x0)
r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO79(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x194, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_RADIO_NAME={0x17e, 0x11, 'pAC8021\xa2,\xeb,}\x80\xab\x94\xdd|\xcb\xcf\x92\xab1_HWSIM\x10\xe4\xdf\x88\\n\x046\xef\xd9\xb0>\xaf\x99\xcc\xa6jC\xcc\xfd\x99;\xe5\x97(x\xa1\\\x8fok\xfev\xa2\b\x95Y\x14\xc0D\x1b\xc4\xd8\x96\x82\x96G\xde\xac\xd0\xc2\xe5\fK\xa8\xf6\xce\xf1\xf9}\xbf\x99\x93X\\\xd3\xcdf\xe2\x0eJ}-\xd8\xe9\xf2\v.\x12\xee\xef\xb4\xdc\x9d\xbbt\xfa\xec>\xe3<=\xd5\x01\xbf\xda\xf8Mof^\xb9\xa77\xdc\x1a\xf6\xeb\xff^\xc3\xeb\x1c3\x83\xbf\xcd\xeb\x13\xc6\x04 \x8f\xd3\xb6\xb1\xc7)\x0eD\xda\x16\xe8\xe5\xf4\xe9{I\xbdD-\x8e\xa9\xbe\xc4\xf9VQ\x85\xf7\xb9\x1c\xbe\x1a\xc2\xcf\xe4j\xd4\xc5(\x91 <\nd\x06\x93v\x89\x84|\x02\x14\x03\xbc\f@\xf8\xe59p\x19\x84M\xf6\x89\xc8\x9a\x18\x91\xc5b\xf5\xda\xf1\xe4\x16\x15\xd6H=\xafX>D\xbf\xf4\xfc#)\xa1\x94\xab8\xa0#\x1bSL`Y\xf6|\x1e\xc2,s\xab\x16\\\xd0l\x95Om2n?\xcaOT\x0e\x16~\xa1\xcap/i~\x01\xb7\x98\xb5D\xf8\xb0\xcd6\xcb\xe0\xd4\xc7h-\x06\xdcG\xeb\xa9N=EF\xbc%\xa6Nz\x15E\xdcKP\xb4\xce\xf8uV\x96:\x8b\xbeI\x9c\x15\xfd7R\xda\xc3\t`\x16/\xfa\x1eJw&\xb5\x17\xa3\x84\xb4Uy\bB\x91}N \xfd+\x86\xfc\xf6\t\x17{A\n{g\xca\x01m\"4\xb9\xd9\xffo\x99\xfd\xe0\xfc\xa4'}]}, 0x194}, 0x1, 0x0, 0x0, 0xf9bcc74208cd18f9}, 0x4004)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
adjtimex$auto(0x2) (async)
fork$auto() (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30, 3, 8, 30, 14, 6, 30, 8, 29, 10, 10, 23, 6, 13, 8, 17, 22, 25, 5, 14, 22, 16, 17]
detailed listing:
executing program 1:
madvise$auto(0x0, 0x2000040080000004, 0xe)
syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000000c0), 0xffffffffffffffff)
madvise$auto(0x0, 0x80000001, 0x8)
r0 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0000, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_INTERFACE320(r0, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000001140)={0xec, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_COORDINATOR={0x51, 0x1e, "8ff4ec3522cddb723bb7e9113a74617d522a6b09cddd3a781a7d051b51216b5bfcca2884b387edf0dd37adb9dc0085aad5435d76c8a7a2fa25e3866ab0cd0db204e4158d42f6552a86228fd25e"}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xc15a}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x52}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x101}, @NL802154_ATTR_COORDINATOR={0x36, 0x1e, "4575e877b29a76ecbe0c61d9f5da996858d67faeef60ae2666c613e44823976904421e3843206fddb96353ec45b67d36cff9"}, @NL802154_ATTR_SCAN_MEAN_PRF={0x2d, 0x23, "abdd9ac360254095de6af7e074c48517ab45eb37db4182fb0341805253dcaa4b9c9ec97ad462507543"}, @NL802154_ATTR_WPAN_PHY_CAPS={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
madvise$auto(0x1ffff000, 0x5510, 0x8)
ioctl$auto(0xc8, 0x4000400454cd, 0x1)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000)
clone$auto(0x8000000000000000, 0x104, 0x200, 0x1, 0x100000000)
madvise$auto(0x0, 0x3, 0x15)
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_HARDIF5(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x37a4e07e36bca730}, 0x4810)
socket(0x15, 0x2, 0x2)
ioperm$auto(0x40003, 0x8, 0x149)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x27f1)
connect$auto(0x3, 0x4, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
keyctl$auto(0x1e, 0x8001, 0x40000000001065, 0x1, 0x1)
r0 = socket(0x1e, 0x5, 0xd7)
fcntl$auto(0x4, 0x4, 0xa553)
mmap$auto(0x4, 0x6, 0x0, 0xffffffffffffffff, 0xffff, 0x8)
mmap$auto(0xfffffffffffffffd, 0xa, 0xdf, 0x9b72, 0x6, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x4)
epoll_pwait2$auto(0x1, 0x6ba55e92, 0x3, 0x8, 0x5, 0x6)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x7, 0x5)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSC151(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf250200000008000100", @ANYRESHEX=r1, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8006}, 0x8d0)
prctl$auto(0x1000000000000081, 0x7, 0xfb, 0x9, 0x15a7)
epoll_wait$auto(0x2, 0x0, 0x800, 0x2)
ioperm$auto(0x7, 0x6, 0x4000000000002)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
semctl$auto(0x4, 0x1, 0x14, 0x1)
fanotify_init$auto(0x5, 0x9)
epoll_pwait2$auto(0xd, 0x100000274, 0x65800, 0x7, 0xffffffffffffffff, 0x7)
clone$auto(0x10051c, 0x10000000000006, 0x1, 0x5, 0x6)
executing program 1:
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x600000000, 0x6, 0x7, 0x11, 0x2, 0x1ff)
write$auto(0x1, 0x2, 0x400102)
executing program 1:
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = socket(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'})
io_setup$auto(0x10, 0x20000001)
socket(0x2, 0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x1b72, 0xbe7, 0x4)
setsockopt$auto(0x3, 0x0, 0x4, 0xe33, 0x3)
fchownat$auto(0x7, 0x2, 0x7, 0xfffffffffffffffb, 0x8)
executing program 1:
ioperm$auto(0x2, 0x3, 0x0)
close_range$auto(0x7, 0xfffffffffffffff8, 0x2) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async)
sendmsg$auto_MACSEC_CMD_ADD_TXSA149(r0, 0x0, 0x4000)
pivot_root$auto(0x7, 0x6)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x5, 0x0)
fstatfs$auto(0x3, 0x8)
getsockopt$auto(0x6, 0x40000000084, 0x72, 0x80009, 0x6) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
mincore$auto(0x0, 0x8000000000005b, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
socket(0x1, 0x2, 0x0) (async)
fstat$auto(0x100000000, 0x7) (async)
socket(0x5, 0x800, 0xe7c7) (async)
semop$auto(0x1, 0x2, 0x40000) (async)
socket(0x11, 0x3, 0x2) (async)
getsockopt$auto(0x6, 0x107, 0x7, 0x401, 0xa) (async)
ioctl$auto(0x1, 0x890b, 0x8) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
open(&(0x7f0000000800)='./file0\x00', 0xaf44529eb48add62, 0x154)
executing program 1:
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getrlimit$auto(0x2, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xa, 0xe, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xf, 0x6, 0x2) (async)
socket(0x1d, 0x2, 0x7) (async)
getsockopt$auto(0x6, 0x6b, 0x29, 0x401, 0xa)
socket(0x2, 0x1, 0x0) (async)
socket(0x1e, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
cachestat$auto(0x3, 0x5, 0x4, 0x1000007)
executing program 0:
execve$auto(0xe673, 0x2, 0x1f7f)
execve$auto(0x7, 0x3, 0x401)
r0 = socket(0x1e, 0x6, 0x2)
syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000040), r0)
fadvise64$auto(0x9, 0x1, 0x8, 0xfff)
listen$auto(0x3, 0x85)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x2000040080000004, 0xe)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x0, 0x7ffe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x6, 0x5, 0x9)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0xfffffffffffffffa, 0x0, 0x1a, 0x480c, 0x4000800000)
msgctl$auto(0x81, 0x3, 0x3)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET59(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xffffffffffffff99, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0ab616dd", @ANYRESOCT=r0, @ANYBLOB="000227bd7000fddbdf250f000000070001007ff1a700"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
mincore$auto(0x0, 0x8000000000005b, 0x2)
fcntl$auto(0x1, 0x26, 0x2)
r2 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000080), r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
socket(0xa, 0x2, 0x0)
getsockopt$auto(0x3, 0x100000000000000, 0x2, 0x1000000000000, 0x2)
keyctl$auto(0x11, 0x1000000004, 0x0, 0x5, 0x8003)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00')
mprotect$auto(0xd675, 0x80000000, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x3, 0xb89, 0x3ffffffbffffa)
fanotify_init$auto(0x40, 0xffffffffffffffff)
personality$auto(0x40004010410ffc)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
personality$auto(0x8)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000780), 0xffffffffffffffff)
clone$auto(0x7, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x6, 0x1)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0)
sendmsg$auto_ETHTOOL_MSG_EEE_SET33(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200440c4)
clone$auto(0x2, 0x0, 0xc1b0, 0x7, 0xfffffffffffffffb)
ioprio_get$auto(0x2000000002, 0x0)
sendmsg$auto_OVS_METER_CMD_SET393(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1, r1, 0x300, 0x803, 0x25dfdbfc, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000808}, 0x4008810)
executing program 0:
socket(0x10, 0x3, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x7, 0xfffffffffffffdf8)
iopl$auto(0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
socket(0x15, 0x5, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
timerfd_gettime$auto(0x4, 0x2)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
socket(0xa, 0x6, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x8, 0x4, 0x20000000002, 0x5, 0x3)
lsetxattr$auto(0x2, 0x5, 0x406, 0x102fff, 0x200000000001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
io_uring_setup$auto(0x40000002c55, 0x10)
mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
futimesat$auto(0xc00, 0x2, 0x9)
utimensat$auto(0x84, 0x8, 0x0, 0x9)
sendmsg$auto_NBD_CMD_CONNECT158(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000004217b6760278e350474029cdfd24fb6acaa8785bf3e62ce856d0e889c7a8e219e38829a20e430848e983c01259e85c9f5f26dce98e69debf1a93a27f5f0376bafaa876d905381e8abdab4b9e47428bcee388d03e5e1c89e80cc247abac65cd7ed9d42fc07d3e89241f1bd7f760553e7455b6e706244efcd75e9822539d69c51d5733c9d4a1dd080a35393c6a984085869e56988b4a96c27332b7ab6da6c4d4000000000000000000", @ANYRESOCT=r0, @ANYBLOB="010a2dbd7000fedbdf25010000000d000700c7f29d719c9c043cc6000000c957ab44059d5d35d8c803e9a7dd8f27e8330a27b2343d490179b22546626dcbf2f35e5090d9292adefbc86d3589f0e2741d81ccae1e74623c9c4bfddb2dee1289e6057ccf8f77245b60f3c86aaceb7c8fc3f1eccb7092a33355a9b62aef0b97d9a74e052e739db52f5954583cd190965f72287bf7001c008b"], 0x24}, 0x1, 0x0, 0x0, 0xc084}, 0x4000080)
llistxattr$auto(0x2, 0xe3, 0x5)
socket(0x2, 0x3, 0x1)
fsmount$auto(0x6f39b0be, 0xfffffffffffffffc, 0xcb)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
executing program 0:
bpf$auto(0xc, 0xc0000000000, 0x0)
mmap$auto(0x0, 0x80000000000b9e, 0x8000000000200001, 0x13, 0x9, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x27f1)
shutdown$auto(0x5, 0x2)
write$auto(0x5, 0x800, 0x80000001)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
move_pages$auto(0x1, 0x2000000000003, 0xff, 0x0, 0x1, 0x8000000000000000)
ioctl$auto(0xc8, 0x400454d1, 0x5c8d)
executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
socket(0x2, 0x1, 0x106) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP456(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x0, 0x305, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x800)
fstatfs$auto(0x3, 0x8)
recvmmsg$auto(0x5, 0x4, 0x7fffff80, 0x1560, 0x7) (async)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
setrlimit$auto(0x1000000007, 0x1) (async, rerun: 32)
socket(0xa, 0x801, 0x84)
executing program 3:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
io_uring_setup$auto(0x3ff, 0x3)
io_uring_setup$auto(0x7, 0x0)
setresuid$auto(0x8, 0x100000001, 0x401)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
io_uring_setup$auto(0x3ff, 0x3)
mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
write$auto(0x5, 0x800, 0x80000001)
mmap$auto(0x56, 0x6, 0x7, 0x12, 0x6, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x6, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
getsockopt$auto(0x8, 0x29, 0xb, 0x7, 0x6)
mmap$auto(0x0, 0x8780, 0xfd51, 0x91, 0x6, 0x1)
clock_nanosleep$auto(0xfffffffffffffffa, 0x4, 0x0, 0x3)
executing program 2:
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xf000, 0xb, 0x1000000003, 0x9b72, 0x7, 0x7ff)
socket(0x1a, 0x1, 0x0)
dup2$auto(0x0, 0x83)
getrandom$auto(0x0, 0x5, 0x2)
clone$auto(0x81000005, 0x6, 0x8000, 0x40000000000006, 0x80000001)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO79(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x4a2e9e39, 0x2, 0x8000)
ioctl$auto(0x3, 0x89e2, 0x91)
ioctl$auto(0x3, 0x89e2, 0x91)
r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000002fc0), 0xffffffffffffffff)
setreuid$auto(0x3, 0x7)
kill$auto(0x1, 0x12)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmsg$auto_TCP_METRICS_CMD_GET427(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2000880)
executing program 3:
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
keyctl$auto(0x10, 0xffffffffffffffff, 0x5, 0x5, 0x80000003)
socket(0x2b, 0x1, 0x1)
io_uring_register$auto(0x7ff, 0x80000000, 0x1, 0x2)
listen$auto(0x3, 0x81)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
mbind$auto(0x1ffff000, 0x6, 0x1, 0x0, 0x7ffb, 0x2)
mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2)
executing program 2:
socket(0x10, 0x3, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x29, 0x5, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x409b72, 0x2, 0x8000) (async)
socket(0x1, 0x1, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
socket(0x18, 0x5, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x0, 0x1, 0x1c, 0x7, 0xfa) (async)
socket$nl_generic(0x10, 0x3, 0x10)
get_robust_list$auto(0x100000000, 0x2, 0x7f) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
getsockopt$auto(0x100000006, 0x88, 0x1, 0x9, 0x0) (async)
socket(0x2, 0x1, 0x0) (async)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x2009b72, 0x2, 0x8000)
setsockopt$auto(0x6, 0x8000000000000006, 0x11, 0x4808, 0x7ffffc)
executing program 0:
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x81000005, 0x6, 0x8000, 0x40000000000006, 0x80000001)
mmap$auto(0x5, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
getdents$auto(0x3e4, 0x0, 0x7ee)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
fork$auto()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fork$auto()
mmap$auto(0xf, 0x5, 0xb, 0x17, 0xfffffffffffff566, 0x2)
fsconfig$auto(0x6, 0x5, 0x200, 0x4, 0x5)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0x3, 0x15)
bpf$auto(0x8000000000000012, 0x2000000009, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0x4, 0x8, 0x1)
madvise$auto(0x0, 0x3, 0x15)
sendmsg$auto_NETDEV_CMD_DEV_GET168(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd700030dbdf25010000000800010021c9"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getresuid$auto(0x9, 0x5, 0x1004)
executing program 3:
ioperm$auto(0x7, 0x6, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START260(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x21, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2004c050)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_FEC_SET37(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x44)
socket(0x1d, 0x2, 0x7)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
fstatfs$auto(0x3, 0x8)
set_mempolicy$auto(0x6, 0x9, 0xf)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mlockall$auto(0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000c40), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$auto_NL802154_CMD_SET_CCA_MODE342(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdc02, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xed67adf7c888a399}, 0xc0)
sendmsg$auto_MACSEC_CMD_ADD_TXSA149(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}, @MACSEC_ATTR_SA_CONFIG={0x44, 0x3, "0286a18049015cb65b136b91f2b0af005c6c9724d3794960aca09624c9f5bc7a69185d03d40c0011af6bd5d1dbbc513806c956708c8e36e036b5b4255011dc35"}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_SA_CONFIG={0x15, 0x3, "823f86df858749207e71be067b796acfcb"}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40891}, 0x40400c9)
timerfd_create$auto(0x9, 0x0)
ioctl$auto(0x3, 0x40085400, 0xfffffffffffff4e0)
socket(0x15, 0x801, 0x10)
setsockopt$auto(0x3, 0x0, 0x18, 0xe33, 0x0)
io_getevents$auto(0x3ff, 0x607, 0x8, 0xa871a38, 0x6b)
setregid$auto(0x9, 0x7fffffffffffffff)
executing program 2:
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
waitid$auto(0x9, 0x1, 0xffb, 0x8, 0x1000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_CGROUPSTATS_CMD_GET19(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800)
executing program 0:
r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_VPORT_CMD_SET398(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '\xab\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x68094)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000006c0), 0xffffffffffffffff)
clock_getres$auto(0xfffffffffffffffc, 0x1) (async)
clock_getres$auto(0xfffffffffffffffc, 0x1)
io_uring_setup$auto(0x5, 0x3)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) (async)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1)
sendmsg$auto_NL802154_CMD_SET_CHANNEL343(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc141}, 0x20000000) (async)
sendmsg$auto_NL802154_CMD_SET_CHANNEL343(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc141}, 0x20000000)
sendmsg$auto_OVS_VPORT_CMD_SET398(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x50, 0x5, "b7e6b88d3818b63b21eb723e1fb00ab1c222b7b3da8f9ae339535dc6d7ad362e9b1fd5bd4f6fa936148c22cbebe0d77197b03fddca498ecda4c14828c048e1e73446cac44fd0c1c3e86fb0b5"}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x4080)
sendmsg$auto_NBD_CMD_CONNECT158(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70b92a, 0x25dffbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x23}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000800)
executing program 3:
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x7, 0x28000)
sendmsg$auto_NL80211_CMD_ASSOCIATE208(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xffffffffffffffc6, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket(0x2, 0x1, 0x106) (async)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0xa, 0x1680000) (async)
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL12(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040090) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r1 = socket(0xa, 0x3, 0x73)
sendmsg$auto_NL80211_CMD_SET_WOWLAN299(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0xffd8) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x2000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async)
clone$auto(0x8000000000000000, 0x4, 0x200, 0x1, 0x3)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) (async)
mmap$auto(0x8, 0x57, 0x1bc, 0x14, 0x4, 0x62e8)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA230(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x138, r2, 0x403, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REKEY_DATA={0xdc, 0x7a, "82e8f59c9d7d95c942dceb8b8a6790aca1baabc4a9336b5f474e2ca58cb1506724f523790f46d8aa382722fd5fb01e671b49aa4cc7313433771d6774a72313832d371945be7621a960db40cad8ddad2b6d3837d2dc5d1b88a5115ffdea281829e14e4284ec34572845a46e93dcd3cd926f53c651e0ead2c63b754959932362bca26df3d0dd797fa129114e3e21576aed155818adc12751ce0b3c6832905bb0ffe0f2912e0857b9fd63062c30c44775ff7611814b5c9cbcf352f006ab05b7fef86d64c48b835da4403763c81f3cd84bec27f75500dbcc8d47"}, @NL80211_ATTR_MLO_TTLM_DLINK={0x24, 0x148, "6d0bd09687fba3ae643af22a60109039b03de2270c7ce0fdbdea37b3a7276ecf"}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xffff7fff}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x24040800) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
pipe2$auto(0x8, 0x1) (async)
open(&(0x7f0000000000)='./file0/file0\x00', 0x400, 0x1ea) (async)
execveat$auto(0x0, 0x2, 0x7, 0xe3a, 0x1000)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
adjtimex$auto(0x2) (async)
fork$auto() (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
getsockopt$auto(0x6, 0x29, 0xffffffff, 0x2009, 0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0x3, 0x1c83d47d, 0x8, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
socket(0x2, 0x1, 0x106)
bind$auto(0x3, 0xff, 0x7f)
close_range$auto(0x2, 0x8000, 0x0)
r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO79(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x194, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_RADIO_NAME={0x17e, 0x11, 'pAC8021\xa2,\xeb,}\x80\xab\x94\xdd|\xcb\xcf\x92\xab1_HWSIM\x10\xe4\xdf\x88\\n\x046\xef\xd9\xb0>\xaf\x99\xcc\xa6jC\xcc\xfd\x99;\xe5\x97(x\xa1\\\x8fok\xfev\xa2\b\x95Y\x14\xc0D\x1b\xc4\xd8\x96\x82\x96G\xde\xac\xd0\xc2\xe5\fK\xa8\xf6\xce\xf1\xf9}\xbf\x99\x93X\\\xd3\xcdf\xe2\x0eJ}-\xd8\xe9\xf2\v.\x12\xee\xef\xb4\xdc\x9d\xbbt\xfa\xec>\xe3<=\xd5\x01\xbf\xda\xf8Mof^\xb9\xa77\xdc\x1a\xf6\xeb\xff^\xc3\xeb\x1c3\x83\xbf\xcd\xeb\x13\xc6\x04 \x8f\xd3\xb6\xb1\xc7)\x0eD\xda\x16\xe8\xe5\xf4\xe9{I\xbdD-\x8e\xa9\xbe\xc4\xf9VQ\x85\xf7\xb9\x1c\xbe\x1a\xc2\xcf\xe4j\xd4\xc5(\x91 <\nd\x06\x93v\x89\x84|\x02\x14\x03\xbc\f@\xf8\xe59p\x19\x84M\xf6\x89\xc8\x9a\x18\x91\xc5b\xf5\xda\xf1\xe4\x16\x15\xd6H=\xafX>D\xbf\xf4\xfc#)\xa1\x94\xab8\xa0#\x1bSL`Y\xf6|\x1e\xc2,s\xab\x16\\\xd0l\x95Om2n?\xcaOT\x0e\x16~\xa1\xcap/i~\x01\xb7\x98\xb5D\xf8\xb0\xcd6\xcb\xe0\xd4\xc7h-\x06\xdcG\xeb\xa9N=EF\xbc%\xa6Nz\x15E\xdcKP\xb4\xce\xf8uV\x96:\x8b\xbeI\x9c\x15\xfd7R\xda\xc3\t`\x16/\xfa\x1eJw&\xb5\x17\xa3\x84\xb4Uy\bB\x91}N \xfd+\x86\xfc\xf6\t\x17{A\n{g\xca\x01m\"4\xb9\xd9\xffo\x99\xfd\xe0\xfc\xa4'}]}, 0x194}, 0x1, 0x0, 0x0, 0xf9bcc74208cd18f9}, 0x4004)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
adjtimex$auto(0x2) (async)
fork$auto() (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
single: successfully extracted reproducer
found reproducer with 16 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
adjtimex$auto(0x2) (async)
fork$auto() (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
adjtimex$auto(0x2) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
adjtimex$auto(0x2) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-madvise$auto-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-adjtimex$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
adjtimex$auto(0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEV321(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8861)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
fork$auto() (async)
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, 0x0, 0x4) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4)

program crashed: KASAN: slab-use-after-free Read in shrinker_free
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$auto_nfsd-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201-socket$nl_generic-mmap$auto-fork$auto-sendmsg$auto_NFSD_CMD_THREADS_SET201
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xaf}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
fork$auto()
sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4)

program did not crash
reproducing took 2h31m58.471088929s
repro crashed as (corrupted=false):
svc: failed to register nfsdv3 RPC service (errno 111).
svc: failed to register nfsaclv3 RPC service (errno 111).
==================================================================
BUG: KASAN: slab-use-after-free in shrinker_free+0x3b7/0x430 mm/shrinker.c:775
Read of size 4 at addr ffff88802e9f131c by task syz.2.378/23139

CPU: 1 UID: 0 PID: 23139 Comm: syz.2.378 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119
 print_address_description mm/kasan/report.c:377 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:488
 kasan_report+0xd9/0x110 mm/kasan/report.c:601
 shrinker_free+0x3b7/0x430 mm/shrinker.c:775
 nfsd_file_cache_shutdown+0xbc/0x480 fs/nfsd/filecache.c:891
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:329 [inline]
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:323 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:444 [inline]
 nfsd_svc+0x6d4/0x970 fs/nfsd/nfssvc.c:817
 nfsd_nl_threads_set_doit+0x52c/0xbc0 fs/nfsd/nfsctl.c:1714
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2603
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2657
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2686
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f722837def9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7229116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f7228535f80 RCX: 00007f722837def9
RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000003
RBP: 00007f72283f0b76 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f7228535f80 R15: 00007ffe1173b828
 </TASK>

Allocated by task 23059:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:387
 kmalloc_noprof include/linux/slab.h:690 [inline]
 kzalloc_noprof include/linux/slab.h:816 [inline]
 shrinker_alloc+0xf8/0xb00 mm/shrinker.c:683
 nfsd_file_cache_init+0x152/0x450 fs/nfsd/filecache.c:743
 nfsd_startup_generic fs/nfsd/nfssvc.c:307 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:402 [inline]
 nfsd_svc+0x542/0x970 fs/nfsd/nfssvc.c:817
 nfsd_nl_threads_set_doit+0x52c/0xbc0 fs/nfsd/nfsctl.c:1714
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2603
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2657
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2686
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 0:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:579
 poison_slab_object+0xf7/0x160 mm/kasan/common.c:240
 __kasan_slab_free+0x32/0x50 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2250 [inline]
 slab_free mm/slub.c:4474 [inline]
 kfree+0x12a/0x3b0 mm/slub.c:4595
 rcu_do_batch kernel/rcu/tree.c:2569 [inline]
 rcu_core+0x828/0x16b0 kernel/rcu/tree.c:2843
 handle_softirqs+0x216/0x8f0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541
 __call_rcu_common.constprop.0+0x9a/0x790 kernel/rcu/tree.c:3106
 shrinker_free+0xfe/0x430 mm/shrinker.c:807
 nfsd_file_cache_shutdown+0xbc/0x480 fs/nfsd/filecache.c:891
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:329 [inline]
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:323 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:444 [inline]
 nfsd_svc+0x6d4/0x970 fs/nfsd/nfssvc.c:817
 nfsd_nl_threads_set_doit+0x52c/0xbc0 fs/nfsd/nfsctl.c:1714
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2603
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2657
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2686
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802e9f1300
 which belongs to the cache kmalloc-192 of size 192
The buggy address is located 28 bytes inside of
 freed 192-byte region [ffff88802e9f1300, ffff88802e9f13c0)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e9f1
anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: 0xfdffffff(slab)
raw: 00fff00000000000 ffff88801ac413c0 ffffea0001d2eb80 dead000000000005
raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 21442618535, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1500
 prep_new_page mm/page_alloc.c:1508 [inline]
 get_page_from_freelist+0x1351/0x2e50 mm/page_alloc.c:3446
 __alloc_pages_noprof+0x22b/0x2460 mm/page_alloc.c:4702
 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline]
 alloc_pages_node_noprof include/linux/gfp.h:296 [inline]
 alloc_slab_page+0x4e/0xf0 mm/slub.c:2319
 allocate_slab mm/slub.c:2482 [inline]
 new_slab+0x84/0x260 mm/slub.c:2535
 ___slab_alloc+0xdac/0x1870 mm/slub.c:3721
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3811
 __slab_alloc_node mm/slub.c:3864 [inline]
 slab_alloc_node mm/slub.c:4026 [inline]
 __kmalloc_cache_noprof+0x2c5/0x310 mm/slub.c:4185
 kmalloc_noprof include/linux/slab.h:690 [inline]
 kzalloc_noprof include/linux/slab.h:816 [inline]
 call_usermodehelper_setup+0x9a/0x340 kernel/umh.c:363
 kobject_uevent_env+0xde3/0x1670 lib/kobject_uevent.c:628
 driver_register+0x2d3/0x4b0 drivers/base/driver.c:254
 usb_register_driver+0x24a/0x500 drivers/usb/core/driver.c:1082
 do_one_initcall+0x128/0x630 init/main.c:1269
 do_initcall_level init/main.c:1331 [inline]
 do_initcalls init/main.c:1347 [inline]
 do_basic_setup init/main.c:1366 [inline]
 kernel_init_freeable+0x660/0xc50 init/main.c:1580
 kernel_init+0x1c/0x2b0 init/main.c:1469
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802e9f1200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff88802e9f1280: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88802e9f1300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88802e9f1380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
 ffff88802e9f1400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================

final repro crashed as (corrupted=false):
svc: failed to register nfsdv3 RPC service (errno 111).
svc: failed to register nfsaclv3 RPC service (errno 111).
==================================================================
BUG: KASAN: slab-use-after-free in shrinker_free+0x3b7/0x430 mm/shrinker.c:775
Read of size 4 at addr ffff88802e9f131c by task syz.2.378/23139

CPU: 1 UID: 0 PID: 23139 Comm: syz.2.378 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119
 print_address_description mm/kasan/report.c:377 [inline]
 print_report+0xc3/0x620 mm/kasan/report.c:488
 kasan_report+0xd9/0x110 mm/kasan/report.c:601
 shrinker_free+0x3b7/0x430 mm/shrinker.c:775
 nfsd_file_cache_shutdown+0xbc/0x480 fs/nfsd/filecache.c:891
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:329 [inline]
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:323 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:444 [inline]
 nfsd_svc+0x6d4/0x970 fs/nfsd/nfssvc.c:817
 nfsd_nl_threads_set_doit+0x52c/0xbc0 fs/nfsd/nfsctl.c:1714
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2603
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2657
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2686
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f722837def9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7229116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f7228535f80 RCX: 00007f722837def9
RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000003
RBP: 00007f72283f0b76 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f7228535f80 R15: 00007ffe1173b828
 </TASK>

Allocated by task 23059:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:387
 kmalloc_noprof include/linux/slab.h:690 [inline]
 kzalloc_noprof include/linux/slab.h:816 [inline]
 shrinker_alloc+0xf8/0xb00 mm/shrinker.c:683
 nfsd_file_cache_init+0x152/0x450 fs/nfsd/filecache.c:743
 nfsd_startup_generic fs/nfsd/nfssvc.c:307 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:402 [inline]
 nfsd_svc+0x542/0x970 fs/nfsd/nfssvc.c:817
 nfsd_nl_threads_set_doit+0x52c/0xbc0 fs/nfsd/nfsctl.c:1714
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2603
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2657
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2686
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 0:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:579
 poison_slab_object+0xf7/0x160 mm/kasan/common.c:240
 __kasan_slab_free+0x32/0x50 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2250 [inline]
 slab_free mm/slub.c:4474 [inline]
 kfree+0x12a/0x3b0 mm/slub.c:4595
 rcu_do_batch kernel/rcu/tree.c:2569 [inline]
 rcu_core+0x828/0x16b0 kernel/rcu/tree.c:2843
 handle_softirqs+0x216/0x8f0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541
 __call_rcu_common.constprop.0+0x9a/0x790 kernel/rcu/tree.c:3106
 shrinker_free+0xfe/0x430 mm/shrinker.c:807
 nfsd_file_cache_shutdown+0xbc/0x480 fs/nfsd/filecache.c:891
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:329 [inline]
 nfsd_shutdown_generic fs/nfsd/nfssvc.c:323 [inline]
 nfsd_startup_net fs/nfsd/nfssvc.c:444 [inline]
 nfsd_svc+0x6d4/0x970 fs/nfsd/nfssvc.c:817
 nfsd_nl_threads_set_doit+0x52c/0xbc0 fs/nfsd/nfsctl.c:1714
 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x9ae/0xb40 net/socket.c:2603
 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2657
 __sys_sendmsg+0x117/0x1f0 net/socket.c:2686
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802e9f1300
 which belongs to the cache kmalloc-192 of size 192
The buggy address is located 28 bytes inside of
 freed 192-byte region [ffff88802e9f1300, ffff88802e9f13c0)

The buggy address belongs to the physical page:
page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e9f1
anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: 0xfdffffff(slab)
raw: 00fff00000000000 ffff88801ac413c0 ffffea0001d2eb80 dead000000000005
raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 21442618535, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1500
 prep_new_page mm/page_alloc.c:1508 [inline]
 get_page_from_freelist+0x1351/0x2e50 mm/page_alloc.c:3446
 __alloc_pages_noprof+0x22b/0x2460 mm/page_alloc.c:4702
 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline]
 alloc_pages_node_noprof include/linux/gfp.h:296 [inline]
 alloc_slab_page+0x4e/0xf0 mm/slub.c:2319
 allocate_slab mm/slub.c:2482 [inline]
 new_slab+0x84/0x260 mm/slub.c:2535
 ___slab_alloc+0xdac/0x1870 mm/slub.c:3721
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3811
 __slab_alloc_node mm/slub.c:3864 [inline]
 slab_alloc_node mm/slub.c:4026 [inline]
 __kmalloc_cache_noprof+0x2c5/0x310 mm/slub.c:4185
 kmalloc_noprof include/linux/slab.h:690 [inline]
 kzalloc_noprof include/linux/slab.h:816 [inline]
 call_usermodehelper_setup+0x9a/0x340 kernel/umh.c:363
 kobject_uevent_env+0xde3/0x1670 lib/kobject_uevent.c:628
 driver_register+0x2d3/0x4b0 drivers/base/driver.c:254
 usb_register_driver+0x24a/0x500 drivers/usb/core/driver.c:1082
 do_one_initcall+0x128/0x630 init/main.c:1269
 do_initcall_level init/main.c:1331 [inline]
 do_initcalls init/main.c:1347 [inline]
 do_basic_setup init/main.c:1366 [inline]
 kernel_init_freeable+0x660/0xc50 init/main.c:1580
 kernel_init+0x1c/0x2b0 init/main.c:1469
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802e9f1200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff88802e9f1280: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88802e9f1300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88802e9f1380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
 ffff88802e9f1400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================