Extracting prog: 41m25.667080688s Minimizing prog: 2h55m27.183373036s Simplifying prog options: 13m5.890548792s Extracting C: 5m15.010159653s Simplifying C: 0s extracting reproducer from 74 programs testing a last program of every proc single: executing 24 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-getsockname$packet-sendmsg$nl_route_sched-sendmsg$IPCTNL_MSG_CT_NEW-sendmsg$nl_route_sched-socket$netlink-sendmmsg detailed listing: executing program 0: r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): read$eventfd-userfaultfd-ioctl$UFFDIO_COPY-dup-syz_open_dev$dri-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-syz_open_dev$ndb-socketpair$nbd-ioctl$NBD_SET_SOCK-dup3-sendmsg$NBD_CMD_DISCONNECT detailed listing: executing program 0: read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, 0x3000, 0x1}) dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) dup3(r4, r1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getpid-socket$inet6_udp-bpf$MAP_CREATE-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-bpf$PROG_LOAD-syz_mount_image$ext4-syz_mount_image$ext4-openat$cgroup_ro-mmap-ftruncate-syz_clone-process_vm_writev detailed listing: executing program 0: getpid() socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x2000765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_mptcp-connect$inet-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-keyctl$read-shutdown detailed listing: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) keyctl$read(0x97b, 0x0, 0x0, 0x0) shutdown(r0, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$rds-socket$inet_smc-setsockopt$IP_VS_SO_SET_ADD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-openat$cgroup_ro-ioctl$vim2m_VIDIOC_S_FMT-prlimit64-sched_setscheduler-getpid-mmap-socketpair$unix-process_vm_readv-sched_setaffinity-connect$unix-sendmmsg$unix-recvmmsg-sched_setaffinity-shmget$private-shmat-mremap detailed listing: executing program 0: socket$rds(0x15, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000780)=""/205, 0xcd}], 0x2, &(0x7f00000019c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000001880)=""/255, 0xff}, {&(0x7f0000001980)=""/1, 0x1}], 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000422000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free single: successfully extracted reproducer found reproducer with 16 syscalls minimizing guilty program testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6 detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) syz_emit_ethernet(0x0, 0x0, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) syz_emit_ethernet(0x6e, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}]}}}}}}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m22.174300998s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash testing program (duration=6m22.174300998s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-prlimit64-sched_setscheduler-write$cgroup_pid-write$UHID_INPUT-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$nl_route-connect$inet6-sendmmsg$inet6-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) syz_emit_ethernet(0x7c, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x46, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@hopopts={0x33}], "17a816814c56bda37c55f9856703"}}}}}}}, 0x0) program did not crash reproducing took 3h55m13.751192943s repro crashed as (corrupted=false): unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_hold include/linux/netdevice.h:4165 [inline] dst_init+0xbc/0x3ec net/core/dst.c:52 dst_alloc+0x118/0x168 net/core/dst.c:93 rt_dst_alloc net/ipv4/route.c:1625 [inline] __mkroute_output net/ipv4/route.c:2618 [inline] ip_route_output_key_hash_rcu+0x116c/0x1e88 net/ipv4/route.c:2840 ip_route_output_key_hash+0x174/0x294 net/ipv4/route.c:2669 __ip_route_output_key include/net/route.h:141 [inline] ip_route_output_flow+0x3c/0x160 net/ipv4/route.c:2897 ip_route_output_key include/net/route.h:151 [inline] geneve_link_config+0x174/0x550 drivers/net/geneve.c:1585 geneve_newlink+0x134/0x1a8 drivers/net/geneve.c:1638 rtnl_newlink_create+0x294/0x8e4 net/core/rtnetlink.c:3786 __rtnl_newlink net/core/rtnetlink.c:3896 [inline] rtnl_newlink+0x1260/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891 sock_sendmsg_nosec net/socket.c:711 [inline] __sock_sendmsg net/socket.c:726 [inline] __sys_sendto+0x360/0x4d8 net/socket.c:2197 __do_sys_sendto net/socket.c:2204 [inline] __se_sys_sendto net/socket.c:2200 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2200 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 ip6_route_add+0x38/0x194 net/ipv6/route.c:3853 addrconf_prefix_route net/ipv6/addrconf.c:2486 [inline] addrconf_add_linklocal+0x4cc/0x8b4 net/ipv6/addrconf.c:3338 addrconf_addr_gen+0x3d4/0x8f4 net/ipv6/addrconf.c:3467 addrconf_init_auto_addrs+0x798/0xca0 addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 addrconf_f6i_alloc+0x2c4/0x5d0 net/ipv6/route.c:4588 ipv6_add_addr+0x4b4/0xde8 net/ipv6/addrconf.c:1120 addrconf_add_linklocal+0x2c4/0x8b4 net/ipv6/addrconf.c:3336 addrconf_addr_gen+0x3d4/0x8f4 net/ipv6/addrconf.c:3467 addrconf_init_auto_addrs+0x798/0xca0 addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 ip6_route_add+0x38/0x194 net/ipv6/route.c:3853 addrconf_add_mroute net/ipv6/addrconf.c:2550 [inline] addrconf_add_dev+0x2b8/0x458 net/ipv6/addrconf.c:2568 addrconf_dev_config net/ipv6/addrconf.c:3503 [inline] addrconf_init_auto_addrs+0x70c/0xca0 net/ipv6/addrconf.c:3591 addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 ip6_route_add+0x38/0x194 net/ipv6/route.c:3853 addrconf_prefix_route net/ipv6/addrconf.c:2486 [inline] fixup_permanent_addr net/ipv6/addrconf.c:3622 [inline] addrconf_permanent_addr+0x670/0xaf0 net/ipv6/addrconf.c:3646 addrconf_notify+0x7bc/0xce8 net/ipv6/addrconf.c:3718 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 addrconf_f6i_alloc+0x2c4/0x5d0 net/ipv6/route.c:4588 fixup_permanent_addr net/ipv6/addrconf.c:3607 [inline] addrconf_permanent_addr+0x244/0xaf0 net/ipv6/addrconf.c:3646 addrconf_notify+0x7bc/0xce8 net/ipv6/addrconf.c:3718 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_hold include/linux/netdevice.h:4165 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1217 [inline] fib_check_nh+0xa84/0x17a4 net/ipv4/fib_semantics.c:1237 fib_create_info+0x11d0/0x1ea4 net/ipv4/fib_semantics.c:1533 fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231 fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112 fib_add_ifaddr+0x33c/0x4ec net/ipv4/fib_frontend.c:1156 fib_netdev_event+0x368/0x4ac net/ipv4/fib_frontend.c:1494 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_hold include/linux/netdevice.h:4165 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1217 [inline] fib_check_nh+0xa84/0x17a4 net/ipv4/fib_semantics.c:1237 fib_create_info+0x11d0/0x1ea4 net/ipv4/fib_semantics.c:1533 fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231 fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112 fib_add_ifaddr+0x2e4/0x4ec net/ipv4/fib_frontend.c:1149 fib_netdev_event+0x368/0x4ac net/ipv4/fib_frontend.c:1494 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4148 fib_create_info+0x138c/0x1ea4 net/ipv4/fib_semantics.c:1527 fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231 fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112 fib_add_ifaddr+0x118/0x4ec net/ipv4/fib_frontend.c:1134 fib_inetaddr_event+0x12c/0x200 net/ipv4/fib_frontend.c:1448 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380 __inet_insert_ifa+0x93c/0xb38 net/ipv4/devinet.c:575 inet_rtm_newaddr+0xf94/0x188c net/ipv4/devinet.c:1010 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891 sock_sendmsg_nosec net/socket.c:711 [inline] __sock_sendmsg net/socket.c:726 [inline] __sys_sendto+0x360/0x4d8 net/socket.c:2197 final repro crashed as (corrupted=false): unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_hold include/linux/netdevice.h:4165 [inline] dst_init+0xbc/0x3ec net/core/dst.c:52 dst_alloc+0x118/0x168 net/core/dst.c:93 rt_dst_alloc net/ipv4/route.c:1625 [inline] __mkroute_output net/ipv4/route.c:2618 [inline] ip_route_output_key_hash_rcu+0x116c/0x1e88 net/ipv4/route.c:2840 ip_route_output_key_hash+0x174/0x294 net/ipv4/route.c:2669 __ip_route_output_key include/net/route.h:141 [inline] ip_route_output_flow+0x3c/0x160 net/ipv4/route.c:2897 ip_route_output_key include/net/route.h:151 [inline] geneve_link_config+0x174/0x550 drivers/net/geneve.c:1585 geneve_newlink+0x134/0x1a8 drivers/net/geneve.c:1638 rtnl_newlink_create+0x294/0x8e4 net/core/rtnetlink.c:3786 __rtnl_newlink net/core/rtnetlink.c:3896 [inline] rtnl_newlink+0x1260/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891 sock_sendmsg_nosec net/socket.c:711 [inline] __sock_sendmsg net/socket.c:726 [inline] __sys_sendto+0x360/0x4d8 net/socket.c:2197 __do_sys_sendto net/socket.c:2204 [inline] __se_sys_sendto net/socket.c:2200 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2200 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 ip6_route_add+0x38/0x194 net/ipv6/route.c:3853 addrconf_prefix_route net/ipv6/addrconf.c:2486 [inline] addrconf_add_linklocal+0x4cc/0x8b4 net/ipv6/addrconf.c:3338 addrconf_addr_gen+0x3d4/0x8f4 net/ipv6/addrconf.c:3467 addrconf_init_auto_addrs+0x798/0xca0 addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 addrconf_f6i_alloc+0x2c4/0x5d0 net/ipv6/route.c:4588 ipv6_add_addr+0x4b4/0xde8 net/ipv6/addrconf.c:1120 addrconf_add_linklocal+0x2c4/0x8b4 net/ipv6/addrconf.c:3336 addrconf_addr_gen+0x3d4/0x8f4 net/ipv6/addrconf.c:3467 addrconf_init_auto_addrs+0x798/0xca0 addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 ip6_route_add+0x38/0x194 net/ipv6/route.c:3853 addrconf_add_mroute net/ipv6/addrconf.c:2550 [inline] addrconf_add_dev+0x2b8/0x458 net/ipv6/addrconf.c:2568 addrconf_dev_config net/ipv6/addrconf.c:3503 [inline] addrconf_init_auto_addrs+0x70c/0xca0 net/ipv6/addrconf.c:3591 addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 ip6_route_add+0x38/0x194 net/ipv6/route.c:3853 addrconf_prefix_route net/ipv6/addrconf.c:2486 [inline] fixup_permanent_addr net/ipv6/addrconf.c:3622 [inline] addrconf_permanent_addr+0x670/0xaf0 net/ipv6/addrconf.c:3646 addrconf_notify+0x7bc/0xce8 net/ipv6/addrconf.c:3718 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc include/linux/netdevice.h:4148 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:916 fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543 ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809 addrconf_f6i_alloc+0x2c4/0x5d0 net/ipv6/route.c:4588 fixup_permanent_addr net/ipv6/addrconf.c:3607 [inline] addrconf_permanent_addr+0x244/0xaf0 net/ipv6/addrconf.c:3646 addrconf_notify+0x7bc/0xce8 net/ipv6/addrconf.c:3718 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_hold include/linux/netdevice.h:4165 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1217 [inline] fib_check_nh+0xa84/0x17a4 net/ipv4/fib_semantics.c:1237 fib_create_info+0x11d0/0x1ea4 net/ipv4/fib_semantics.c:1533 fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231 fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112 fib_add_ifaddr+0x33c/0x4ec net/ipv4/fib_frontend.c:1156 fib_netdev_event+0x368/0x4ac net/ipv4/fib_frontend.c:1494 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_hold include/linux/netdevice.h:4165 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1217 [inline] fib_check_nh+0xa84/0x17a4 net/ipv4/fib_semantics.c:1237 fib_create_info+0x11d0/0x1ea4 net/ipv4/fib_semantics.c:1533 fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231 fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112 fib_add_ifaddr+0x2e4/0x4ec net/ipv4/fib_frontend.c:1149 fib_netdev_event+0x368/0x4ac net/ipv4/fib_frontend.c:1494 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:9026 do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109 rtnl_changelink net/core/rtnetlink.c:3723 [inline] __rtnl_newlink net/core/rtnetlink.c:3874 [inline] rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 ref_tracker: syz_tun@00000000153a6801 has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4148 fib_create_info+0x138c/0x1ea4 net/ipv4/fib_semantics.c:1527 fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231 fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112 fib_add_ifaddr+0x118/0x4ec net/ipv4/fib_frontend.c:1134 fib_inetaddr_event+0x12c/0x200 net/ipv4/fib_frontend.c:1448 notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85 blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380 __inet_insert_ifa+0x93c/0xb38 net/ipv4/devinet.c:575 inet_rtm_newaddr+0xf94/0x188c net/ipv4/devinet.c:1010 rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347 netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891 sock_sendmsg_nosec net/socket.c:711 [inline] __sock_sendmsg net/socket.c:726 [inline] __sys_sendto+0x360/0x4d8 net/socket.c:2197