Extracting prog: 1h1m49.035683727s
Minimizing prog: 34m14.359731811s
Simplifying prog options: 6m32.99877722s
Extracting C: 5m23.174959638s
Simplifying C: 0s


extracting reproducer from 42 programs
testing a last program of every proc
single: executing 12 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-bind$inet-getsockopt$inet_tcp_int-openat$ttynull-ioctl$TCSETSF2-ioctl$TIOCSTI-ioctl$TIOCSTI-setsockopt$sock_int-socket$netlink-syz_genetlink_get_family_id$nl80211-syz_genetlink_get_family_id$nl80211-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_TID_CONFIG-sendmsg$NL80211_CMD_SET_PMK-sendmsg$netlink-syz_usb_connect-sendto$inet-recvfrom
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000400)={0xfffffffe, 0xe7, 0x6, 0x9357, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xd)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xfffff952, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "7524d9e0a69863b3559415c3cbbaee8e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "57a2688cb1281c66bdd23ca9e348a4b3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e591fcd48155019d84e953670ddc3f20"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cab97fcf779152bf1338bc410f25e6f2"}]}, 0x78}, 0x1, 0x0, 0x0, 0x8044000}, 0x0)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002d0001000000000000000000140073000000000000000000000000000000000009000080976b640868000000db0001"], 0x10c}], 0x1}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="120110015efc3d105e042709684b010203010902616501090690e90904900401ff"], 0x0)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-syz_open_dev$usbfs-mmap-openat$kvm-ioctl$KVM_CREATE_VM-socket$netlink-writev-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-socket$nl_route-sendmsg$netlink-ioctl$KVM_RUN-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}})
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x40800}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x7, 0x700, 0xfffffff0, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101}}}})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-bind$inet-getsockopt$inet_tcp_int-openat$ttynull-ioctl$TCSETSF2-ioctl$TIOCSTI-ioctl$TIOCSTI-setsockopt$sock_int-socket$netlink-syz_genetlink_get_family_id$nl80211-syz_genetlink_get_family_id$nl80211-socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_TID_CONFIG-sendmsg$NL80211_CMD_SET_PMK-sendmsg$netlink-syz_usb_connect-sendto$inet-recvfrom
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000400)={0xfffffffe, 0xe7, 0x6, 0x9357, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xd)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xfffff952, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "7524d9e0a69863b3559415c3cbbaee8e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "57a2688cb1281c66bdd23ca9e348a4b3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e591fcd48155019d84e953670ddc3f20"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cab97fcf779152bf1338bc410f25e6f2"}]}, 0x78}, 0x1, 0x0, 0x0, 0x8044000}, 0x0)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002d0001000000000000000000140073000000000000000000000000000000000009000080976b640868000000db0001"], 0x10c}], 0x1}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="120110015efc3d105e042709684b010203010902616501090690e90904900401ff"], 0x0)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-syz_open_dev$usbfs-mmap-openat$kvm-ioctl$KVM_CREATE_VM-socket$netlink-writev-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-socket$nl_route-sendmsg$netlink-ioctl$KVM_RUN-ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}})
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x40800}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x7, 0x700, 0xfffffff0, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101}}}})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket$netlink-sendmsg$netlink-sendmsg$netlink-syz_open_dev$usbmon-syz_open_dev$usbmon-socket$inet_udp-setsockopt$inet_int-setsockopt$inet_int-socketpair-socket$nl_xfrm-sendmsg$nl_xfrm-syz_open_procfs-syz_open_procfs-openat$procfs-ppoll-lseek-ioctl$SIOCSIFMTU-mmap-userfaultfd-ioctl$UFFDIO_API-syz_open_procfs-mprotect-mprotect-syz_open_procfs-syz_open_procfs-fchdir-fchdir-inotify_init-inotify_init-inotify_add_watch-mmap-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_REGISTER-madvise-read-rt_sigsuspend-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-mmap
detailed listing:
executing program 0:
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES64=r0], 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) (async)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES64=r0], 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x20000000)
syz_open_dev$usbmon(&(0x7f0000000100), 0x4, 0x204000) (async)
r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x4, 0x204000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) (async)
setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4)
socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0100b6b02ddc0019269cdfc2d8e39c47000020fc02001a37af306a436bb27f85347dfb551a00"/48, @ANYRES16=r2, @ANYRES16=r0, @ANYBLOB="000000000000000000000000000000003700000000000000070000000000000000000000000000000000000000000000000000000000000000000000e40000000000000000000000000000000000800000000000000300000000000000010000020000000084000500ac1414aa000000000000000000000000000004d56c00000000000000ac1414aa00000000000000000000000000000000000000000000000000000000ffffffffac1e0001000000000000000000000000000000016c00000000000000fe8000000000000000000000000000bb000000000500800000000000000000000600"/244, @ANYBLOB="e4610b0a4dfa8feb7cafde5440ba08bb1c5c76c45954b429229eec7d0dc866a7f6264d52c20022d9cc4f1d343d001838fc64eb727e8676fa4d7ecb00be7c7434e8535ca811a03f1ebd749ab3f87d85450332de6b3374cfcf1c757652af36ac"], 0x13c}}, 0x2000c010)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r7, 0x48}], 0x1, 0x0, 0x0, 0x0)
lseek(r6, 0x401, 0x3)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000002c0)={'ip6gre0\x00', 0x800005})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0)
r8 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_matches\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') (async)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00')
fchdir(r9) (async)
fchdir(r9)
inotify_init() (async)
r10 = inotify_init()
inotify_add_watch(r10, &(0x7f0000000000)='./file0\x00', 0x40000000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0x19a58000)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
read(r8, &(0x7f00000002c0)=""/153, 0x99)
rt_sigsuspend(&(0x7f0000000400)={[0x1000006995dd02]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r11=>0x0, 0x2f, 0x5, 0xc2, 0x7, 0x75, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x40, 0xfffffff9, 0x2}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', r11, 0x7800, 0x700, 0x7, 0x7e, {{0x2f, 0x4, 0x1, 0x13, 0xbc, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xd3, 0x3, 0x0, [{@remote, 0x8}]}, @timestamp_addr={0x44, 0x3c, 0x2c, 0x1, 0x2, [{@remote, 0x100}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1a}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@remote, 0xb0a}, {@private=0x4a010102, 0x3}]}, @lsrr={0x83, 0xf, 0x25, [@local, @private=0xa010100, @remote]}, @lsrr={0x83, 0xb, 0xea, [@remote, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x3c, 0x1, 0xe, [{@empty, 0x2}, {@empty, 0xa058}, {@remote, 0x400}, {@local, 0xfffffffe}, {@private=0xa010101, 0x1000}]}, @lsrr={0x83, 0xf, 0x54, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-openat$vga_arbiter-write$vga_arbiter-mmap-sendmsg$nl_route_sched_retired
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r1, &(0x7f00000004c0), 0xf)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10010, r1, 0xbeb57000)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001ac0)=@newtaction={0x1598, 0x1d, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{0x1584, 0x1, [@m_ipt={0xd8, 0x12, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0xa7, 0x6, "4139907ca3f02cfbc67a92a18208c41f2258aa48a5c5efc740c8476359d8060fd457fc7fbfa462c7ee464779b17e68448049b081724a5892d6f81a68877648aac7712712a4ee2a0170d9870f211ceb4bf5c3859d9278a229c693b99f1611112d22f000e88f8613687d4e0e3ccd40052136988aa21ea99eb90b907aa5c896a022660a81109792e2206b221fd281ef93c2b9e65677a8febc01b7bf24521a7d6be1848910"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x2c8, 0x8, 0x0, 0x0, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x66}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x98, 0x6, {0x7f, 'mangle\x00', 0x1, 0x4, "9f7e92a76816af91be452e0d267e92c03561985946814a49f8c7aca291d356d4fc26f951477dbd560a40f6513f92fba054e293ef953533a836aa2fabd2eda85cb16b629b274e432467402ca61d720be7bff6359b7c9badec6a3f6b3fbc92856f1685b1eaa7a8cdd61cc782a4abf4"}}]}, {0x196, 0x6, "d89d9ecd01c3396eb58cd693e3d9687cb6f84486e664c7a130d149007ecc994f513eb7630000000c02000000800000008ed942e277ba8d4bacc381b6bd7507c8c2b93e6c241346033cc2b488b9956c007888fe48214ef9093d8f33ec55348bfa3671639a231af2e3852cb4a2cd5a81978c9ab8cefb3789fd49b5d0e3599c353c41d37a6d60b49d5e8a2e2e53f0f9b6ae5a38a6e0144b178a50ef47a0fa20e4e3d7ee879787825d8b511d9c5a4952b3bc2a460020b6fabb84c45ea3d8193752400000000000000000000000000000000000004a0ae03c1215f7a7dbaabe3d05504fc1640815dbc78dc7720d75199c65e12e2184e9dea55c82c9e42089fb7c147e8164b6d54bd3a5a77670271c8a05fd9ccefe7ebda9541ce97304cbef56c76c51c9a7b5b4009cbf1a37a890357fa0ec48145f7f7c476c8af0ae632baa888707d264cded2a3e253c7413068f44cb4bfb5435fb152fcd8fdf3ea39412d72b4bce4b3625d32538f7ee4c1230a8b7ea360955258d47520b0e7bb58bd9a6da62724ae3e2f6a829553b8481be7204526f4b064b8590"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xd4, 0x5, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1e7d183f53433f23}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}]}, {0x43, 0x6, "05fcf89c63823ee294543b43948f97f6f0d9c79545ab499ee18e730f9386612f6fb13dd02edbb1c87f0a16ab40ed3d0b6430888f00f6791abc17f2b55b20fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ipt={0xd8, 0xb, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xaba}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4c, 0x6, "227d6f11c101ac1d1b859f2cff53ad11d7dcb8d4783b1a2e5bf24da2f991f7c40d7751c8aad80d4da4d9b71266a4426067d161e2935df9933bf01e90fbdf39c0cd11bed962a55c37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x1034, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x1598}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket$netlink-sendmsg$netlink-sendmsg$netlink-syz_open_dev$usbmon-syz_open_dev$usbmon-socket$inet_udp-setsockopt$inet_int-setsockopt$inet_int-socketpair-socket$nl_xfrm-sendmsg$nl_xfrm-syz_open_procfs-syz_open_procfs-openat$procfs-ppoll-lseek-ioctl$SIOCSIFMTU-mmap-userfaultfd-ioctl$UFFDIO_API-syz_open_procfs-mprotect-mprotect-syz_open_procfs-syz_open_procfs-fchdir-fchdir-inotify_init-inotify_init-inotify_add_watch-mmap-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_REGISTER-madvise-read-rt_sigsuspend-ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-mmap
detailed listing:
executing program 0:
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES64=r0], 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) (async)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES64=r0], 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x20000000)
syz_open_dev$usbmon(&(0x7f0000000100), 0x4, 0x204000) (async)
r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x4, 0x204000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) (async)
setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4)
socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0100b6b02ddc0019269cdfc2d8e39c47000020fc02001a37af306a436bb27f85347dfb551a00"/48, @ANYRES16=r2, @ANYRES16=r0, @ANYBLOB="000000000000000000000000000000003700000000000000070000000000000000000000000000000000000000000000000000000000000000000000e40000000000000000000000000000000000800000000000000300000000000000010000020000000084000500ac1414aa000000000000000000000000000004d56c00000000000000ac1414aa00000000000000000000000000000000000000000000000000000000ffffffffac1e0001000000000000000000000000000000016c00000000000000fe8000000000000000000000000000bb000000000500800000000000000000000600"/244, @ANYBLOB="e4610b0a4dfa8feb7cafde5440ba08bb1c5c76c45954b429229eec7d0dc866a7f6264d52c20022d9cc4f1d343d001838fc64eb727e8676fa4d7ecb00be7c7434e8535ca811a03f1ebd749ab3f87d85450332de6b3374cfcf1c757652af36ac"], 0x13c}}, 0x2000c010)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r7, 0x48}], 0x1, 0x0, 0x0, 0x0)
lseek(r6, 0x401, 0x3)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000002c0)={'ip6gre0\x00', 0x800005})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0)
r8 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_matches\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') (async)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00')
fchdir(r9) (async)
fchdir(r9)
inotify_init() (async)
r10 = inotify_init()
inotify_add_watch(r10, &(0x7f0000000000)='./file0\x00', 0x40000000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0x19a58000)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
read(r8, &(0x7f00000002c0)=""/153, 0x99)
rt_sigsuspend(&(0x7f0000000400)={[0x1000006995dd02]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r11=>0x0, 0x2f, 0x5, 0xc2, 0x7, 0x75, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x40, 0xfffffff9, 0x2}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', r11, 0x7800, 0x700, 0x7, 0x7e, {{0x2f, 0x4, 0x1, 0x13, 0xbc, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xd3, 0x3, 0x0, [{@remote, 0x8}]}, @timestamp_addr={0x44, 0x3c, 0x2c, 0x1, 0x2, [{@remote, 0x100}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1a}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@remote, 0xb0a}, {@private=0x4a010102, 0x3}]}, @lsrr={0x83, 0xf, 0x25, [@local, @private=0xa010100, @remote]}, @lsrr={0x83, 0xb, 0xea, [@remote, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x3c, 0x1, 0xe, [{@empty, 0x2}, {@empty, 0xa058}, {@remote, 0x400}, {@local, 0xfffffffe}, {@private=0xa010101, 0x1000}]}, @lsrr={0x83, 0xf, 0x54, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-openat$vga_arbiter-write$vga_arbiter-mmap-sendmsg$nl_route_sched_retired
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r1, &(0x7f00000004c0), 0xf)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10010, r1, 0xbeb57000)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001ac0)=@newtaction={0x1598, 0x1d, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{0x1584, 0x1, [@m_ipt={0xd8, 0x12, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0xa7, 0x6, "4139907ca3f02cfbc67a92a18208c41f2258aa48a5c5efc740c8476359d8060fd457fc7fbfa462c7ee464779b17e68448049b081724a5892d6f81a68877648aac7712712a4ee2a0170d9870f211ceb4bf5c3859d9278a229c693b99f1611112d22f000e88f8613687d4e0e3ccd40052136988aa21ea99eb90b907aa5c896a022660a81109792e2206b221fd281ef93c2b9e65677a8febc01b7bf24521a7d6be1848910"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x2c8, 0x8, 0x0, 0x0, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x66}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x98, 0x6, {0x7f, 'mangle\x00', 0x1, 0x4, "9f7e92a76816af91be452e0d267e92c03561985946814a49f8c7aca291d356d4fc26f951477dbd560a40f6513f92fba054e293ef953533a836aa2fabd2eda85cb16b629b274e432467402ca61d720be7bff6359b7c9badec6a3f6b3fbc92856f1685b1eaa7a8cdd61cc782a4abf4"}}]}, {0x196, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xd4, 0x5, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1e7d183f53433f23}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}]}, {0x43, 0x6, "05fcf89c63823ee294543b43948f97f6f0d9c79545ab499ee18e730f9386612f6fb13dd02edbb1c87f0a16ab40ed3d0b6430888f00f6791abc17f2b55b20fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ipt={0xd8, 0xb, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xaba}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4c, 0x6, "227d6f11c101ac1d1b859f2cff53ad11d7dcb8d4783b1a2e5bf24da2f991f7c40d7751c8aad80d4da4d9b71266a4426067d161e2935df9933bf01e90fbdf39c0cd11bed962a55c37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x1034, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x1598}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-socket$inet6-setsockopt$inet6_int-sendto$inet6-sendto$inet6-connect$inet6-sendto$inet6-recvmmsg-recvmmsg-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_TREAD64
detailed listing:
executing program 0:
syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) (async)
syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) (async)
sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000007, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) (async)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44000)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000040))

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-socket$inet6-setsockopt$inet6_int-sendto$inet6-sendto$inet6-connect$inet6-sendto$inet6-recvmmsg-recvmmsg-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_TREAD64
detailed listing:
executing program 0:
syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) (async)
syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) (async)
sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000007, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) (async)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44000)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000040))

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-prlimit64-setresuid-setuid-sendmsg$nl_xfrm-socket$netlink-writev
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setresuid(0xee01, 0x0, 0x0)
setuid(0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190028000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

program crashed: WARNING in xfrm6_tunnel_net_exit
single: successfully extracted reproducer
found reproducer with 7 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-prlimit64-setresuid-setuid-sendmsg$nl_xfrm-socket$netlink
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setresuid(0xee01, 0x0, 0x0)
setuid(0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-prlimit64-setresuid-setuid-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setresuid(0xee01, 0x0, 0x0)
setuid(0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-prlimit64-setresuid-setuid
detailed listing:
executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setresuid(0xee01, 0x0, 0x0)
setuid(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-prlimit64-setresuid-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setresuid(0xee01, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-prlimit64-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_xfrm
detailed listing:
executing program 0:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in xfrm6_tunnel_net_exit
validation run: crashed=true
reproducing took 1h50m20.863316504s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 358 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 net/ipv6/xfrm6_tunnel.c:341
Modules linked in:
CPU: 0 UID: 0 PID: 358 Comm: kworker/u8:4 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 net/ipv6/xfrm6_tunnel.c:341
Code: e8 21 3e db fc 4b 83 3c 3e 00 75 19 e8 c5 72 83 fc 49 81 ff f8 07 00 00 74 1b e8 b7 72 83 fc 49 83 c7 08 eb c9 e8 ac 72 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
RSP: 0018:ffffc90001abfb90 EFLAGS: 00010293
RAX: ffffffff85042a64 RBX: ffff8881103811c0 RCX: ffff888107b19300
RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888114be0000
RBP: ffffc90001abfbb0 R08: ffffffff87d35187 R09: 1ffffffff0fa6a30
R10: dffffc0000000000 R11: fffffbfff0fa6a31 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888114be0000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007efca48708c0 CR3: 0000000102f66000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6bd/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 358 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 net/ipv6/xfrm6_tunnel.c:344
Modules linked in:
CPU: 0 UID: 0 PID: 358 Comm: kworker/u8:4 Tainted: G        W          syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 net/ipv6/xfrm6_tunnel.c:344
Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 70 72 83 fc 49 81 ff f8 07 00 00 74 1b e8 62 72 83 fc 49 83 c7 08 eb c5 e8 57 72 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 47 72 83 fc 5b 41 5c 41 5e 41
RSP: 0018:ffffc90001abfb90 EFLAGS: 00010293
RAX: ffffffff85042ab9 RBX: ffff888114be0800 RCX: ffff888107b19300
RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888114be0808
RBP: ffffc90001abfbb0 R08: ffffffff87d35187 R09: 1ffffffff0fa6a30
R10: dffffc0000000000 R11: fffffbfff0fa6a31 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888114be0000 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c0073e4000 CR3: 000000012f182000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6bd/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 358 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310 net/xfrm/xfrm_state.c:3215
Modules linked in:
CPU: 0 UID: 0 PID: 358 Comm: kworker/u8:4 Tainted: G        W          syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm_state_fini+0x2be/0x310 net/xfrm/xfrm_state.c:3215
Code: 3c 20 00 74 08 48 89 df e8 5f 07 f6 fc 48 8b 3b e8 f7 45 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 af b7 00 cc e8 f2 3b 9e fc <0f> 0b e9 b0 fd ff ff e8 e6 3b 9e fc 0f 0b e9 18 fe ff ff e8 da 3b
RSP: 0018:ffffc90001abfb70 EFLAGS: 00010293
RAX: ffffffff84e9611e RBX: ffff8881103811c0 RCX: ffff888107b19300
RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888107b19300
RBP: ffffc90001abfb98 R08: ffffffff87d35187 R09: 1ffffffff0fa6a30
R10: dffffc0000000000 R11: fffffbfff0fa6a31 R12: 1ffffffff0fa6780
R13: dffffc0000000000 R14: ffff888110381dc0 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3146b48060 CR3: 0000000128136000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 xfrm_net_exit+0x31/0x80 net/xfrm/xfrm_policy.c:4342
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6bd/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered forwarding state

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 358 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 net/ipv6/xfrm6_tunnel.c:341
Modules linked in:
CPU: 0 UID: 0 PID: 358 Comm: kworker/u8:4 Not tainted syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 net/ipv6/xfrm6_tunnel.c:341
Code: e8 21 3e db fc 4b 83 3c 3e 00 75 19 e8 c5 72 83 fc 49 81 ff f8 07 00 00 74 1b e8 b7 72 83 fc 49 83 c7 08 eb c9 e8 ac 72 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
RSP: 0018:ffffc90001abfb90 EFLAGS: 00010293
RAX: ffffffff85042a64 RBX: ffff8881103811c0 RCX: ffff888107b19300
RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888114be0000
RBP: ffffc90001abfbb0 R08: ffffffff87d35187 R09: 1ffffffff0fa6a30
R10: dffffc0000000000 R11: fffffbfff0fa6a31 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888114be0000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007efca48708c0 CR3: 0000000102f66000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6bd/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 358 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 net/ipv6/xfrm6_tunnel.c:344
Modules linked in:
CPU: 0 UID: 0 PID: 358 Comm: kworker/u8:4 Tainted: G        W          syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 net/ipv6/xfrm6_tunnel.c:344
Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 70 72 83 fc 49 81 ff f8 07 00 00 74 1b e8 62 72 83 fc 49 83 c7 08 eb c5 e8 57 72 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 47 72 83 fc 5b 41 5c 41 5e 41
RSP: 0018:ffffc90001abfb90 EFLAGS: 00010293
RAX: ffffffff85042ab9 RBX: ffff888114be0800 RCX: ffff888107b19300
RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888114be0808
RBP: ffffc90001abfbb0 R08: ffffffff87d35187 R09: 1ffffffff0fa6a30
R10: dffffc0000000000 R11: fffffbfff0fa6a31 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888114be0000 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c0073e4000 CR3: 000000012f182000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6bd/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 358 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310 net/xfrm/xfrm_state.c:3215
Modules linked in:
CPU: 0 UID: 0 PID: 358 Comm: kworker/u8:4 Tainted: G        W          syzkaller #0 e538f3f6a543b135812147031d083fd1f2699041
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm_state_fini+0x2be/0x310 net/xfrm/xfrm_state.c:3215
Code: 3c 20 00 74 08 48 89 df e8 5f 07 f6 fc 48 8b 3b e8 f7 45 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 af b7 00 cc e8 f2 3b 9e fc <0f> 0b e9 b0 fd ff ff e8 e6 3b 9e fc 0f 0b e9 18 fe ff ff e8 da 3b
RSP: 0018:ffffc90001abfb70 EFLAGS: 00010293
RAX: ffffffff84e9611e RBX: ffff8881103811c0 RCX: ffff888107b19300
RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888107b19300
RBP: ffffc90001abfb98 R08: ffffffff87d35187 R09: 1ffffffff0fa6a30
R10: dffffc0000000000 R11: fffffbfff0fa6a31 R12: 1ffffffff0fa6780
R13: dffffc0000000000 R14: ffff888110381dc0 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3146b48060 CR3: 0000000128136000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 xfrm_net_exit+0x31/0x80 net/xfrm/xfrm_policy.c:4342
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6bd/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered forwarding state